binman refactoring to imrpove section handling bloblist - allow it to be allocated sandbox config-header cleanup