plat-qcom: hoya: lemans: wire up fuse PTA and QFPROM for PAS authentication

Extend Lemans' target.mk so CFG_QCOM_PAS_AUTH pulls in the whole fuse
access chain the signature-authentication path needs:

  CFG_QCOM_PAS_AUTH=y
    -> force CFG_QCOM_FUSE_PTA=y   (fuse PTA the TA reads at runtime)
    -> force CFG_QCOM_QFPROM=y     (driver behind the fuse PTA)
    -> force CFG_QCOM_CMD_DB=y     (voltage-rail lookup for fuse writes)
    -> force CFG_QCOM_RPMH_CLIENT=y (voltage-rail sequencing)

The old CFG_QCOM_QFPROM_FUSEPROV chain that also enabled QFPROM is
folded into the same block so QFPROM_FUSEPROV and the new fuse-PTA
consumer share one enable and there is no accidental drift between
them.

With this change, a stock Lemans build now brings up the entire PAS
authentication stack (segment hash verification and signature
authentication) end to end: PAS PTA, fuse PTA, qfprom driver, and the
qcom_pas TA. Kodiak keeps the plain PTA-side flow untouched.

Signed-off-by: Selvam Sathappan Periakaruppan <speriaka@qti.qualcomm.com>
Assisted-by: Cline:gpt-5

Author: zelvam95

core/arch/arm/plat-qcom/hoya/lemans/target.mk

@@ -7,12 +7,6 @@ ifneq ($(CFG_INSECURE),y)
 CFG_QCOM_QFPROM_FUSEPROV ?= y
 endif
 
-ifeq ($(CFG_QCOM_QFPROM_FUSEPROV),y)
-$(call force,CFG_QCOM_CMD_DB,y)
-$(call force,CFG_QCOM_RPMH_CLIENT,y)
-$(call force,CFG_QCOM_QFPROM,y)
-endif
-
 CFG_QCOM_PAS_PTA ?= y
 
 ifeq ($(CFG_QCOM_PAS_PTA),y)
@@ -29,3 +23,23 @@ CFG_IN_TREE_EARLY_TAS += qcom_pas/cff7d191-7ca0-4784-af13-48223b9a4fbe
 CFG_QCOM_PAS_AUTH ?= y
 endif
 CFG_QCOM_HWKM ?= y
+
+# Signature authentication reads the OEM root-of-trust anchor, anti-rollback
+# version, device identity and other fuses via the fuse PTA; enable it (and
+# therefore the underlying qfprom driver) whenever PAS authentication is on.
+ifeq ($(CFG_QCOM_PAS_AUTH),y)
+$(call force,CFG_QCOM_FUSE_PTA,y)
+endif
+
+# QFPROM backs fuse provisioning (writes) and the fuse PTA (reads) alike;
+# enable the driver whenever either consumer is on.
+ifneq ($(filter y,$(CFG_QCOM_QFPROM_FUSEPROV) $(CFG_QCOM_FUSE_PTA)),)
+$(call force,CFG_QCOM_QFPROM,y)
+endif
+
+# CMD_DB/RPMH_CLIENT back the qfprom driver's fuse-write path (voltage rail
+# sequencing), needed whenever qfprom itself is enabled.
+ifeq ($(CFG_QCOM_QFPROM),y)
+$(call force,CFG_QCOM_CMD_DB,y)
+$(call force,CFG_QCOM_RPMH_CLIENT,y)
+endif