Merge changes from topic "locksettings-aosp-4" into main

* changes:
  Load reboot escrow data at PHASE_BOOT_COMPLETED
  Add a verification flow for the user to exit repair mode
  Create a verify flag to support verification for entering repair mode
  Add a settings key to expose the device's repair mode state
  Add a configuration to enable or disable support for repair mode