Provide reconciliation updates to `/etc` for cases as crypto-policies and ca-trust

[jmarrero]

The current state is: https://gitlab.com/fedora/bootc/docs/-/merge_requests/125/
However we want to design and implement a way we can detect sensitive cases where the system administrator has changed /etc and a update comes from the updated image that could be expected to be applied to retain security or compliance.

[cgwalters]

A good bit of overlap with #1236 - enough that I'd say we probably should fold this into that.