Trusting the Boot Process: Inside Bottlerocket's Security Architecture