#230 - spawn secure boot verification as part of enabling shielded VMs - only vTPM is required by default

we can spawn another issue for this one - secure boot comes along with the other 2 options when enabling shielded VMs - but we need to verify all 3 are selected - vTPM is required but secure boot and integrity monitoring are optional
https://github.com/GoogleCloudPlatform/pbmm-on-gcp-onboarding/blob/main/docs/google-cloud-security-controls.md#compute---shielded-vms

https://github.com/GoogleCloudPlatform/pubsec-declarative-toolkit/pull/230/files#r1068530262

```
apiVersion: resourcemanager.cnrm.cloud.google.com/v1beta1
kind: ResourceManagerPolicy
metadata:
name: compute-require-shielded-vm
```