Merge 4.19.67-2

linux (4.19.67-2co1) apertis; urgency=medium

• Merge from Debian buster. Remaining apertis changes:
  • Add default apertis gbp.conf
  • Widen the binnmu match for Apertis builds
  • Disable rt flavours
  • Disable build of udeb packages
  • Disable signed templates
  • Disable cloud images
  • Install dtbs in /boot
  • d/p/apparmor: Add latest upstream apparmor patches
    • Including fix to enforce denied dbus transations
  • arm64: Add configuration for the 64 bit Renesas platforms
  • armhf: Add configuration for the i.MX6 platform
    • Enable CONFIG_CRYPTO_DEV_FSL_CAAM
    • Disable XEN
    • Add configuration options needed for Audio and USB on Sabre AI boards
  • armhf: d/p/apertis/sabreai-audio: Add fixes for loading and using the audio on i.MX6 Sabre AI boards
  • Bump abiname as we don't match the Debian kernel ABI
• Dropped downstream changes:
  • Support for Raspbery Pi CM3 (APERTIS-6053): shipped upstream
  • Module ABI tweaks: build was still broken on armhf and arm64, replaced by abiname bump