coreos-secex-ignition-prepare: remount /usr rw if needed

Fedora 41 comes with systemd-256, where /usr is read-only during
initramfs time.

See similar issue description in coreos/ignition#1891

overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-secex-ignition-prepare.sh

@@ -15,6 +15,11 @@ cleanup() {
 
 trap cleanup EXIT
 
+# https://github.com/coreos/ignition/issues/1891
+if [ ! -w /usr ]; then
+    mount -o rw,remount /usr
+fi
+
 # copy base Secure Execution config (enables LUKS+dm-verity for boot and root partitions)
 cp /usr/lib/coreos/01-secex.ign /usr/lib/ignition/base.d/01-secex.ign