Provide reconciliation updates to `/etc` for cases as crypto-policies and ca-trust

The current state is: https://gitlab.com/fedora/bootc/docs/-/merge_requests/125/
However we want to design and implement a way we can detect sensitive cases where the system administrator has changed /etc and a update comes from the updated image that could be expected to be applied to retain security or compliance.