Add partition write-lock helper to patina-boot

[kat-perez]

Add a helper in patina-boot to invoke the platform's boot-partition write-lock mechanism. Start with lock_partition_write(boot_services, device_path) -> Result<()>; introduce a PartitionLocker trait if a second mechanism emerges.

Part of #49.