TdxModulePolicy is the TDX module policy.
Optional
MrSeam is the optional allowed measurement of the TDX Module. In case it is nil, ANY measurement is allowed and only the signer is checked.
MrSignerSeam is the allowed signer of the TDX Module (zero for Intel).
TdxModulePolicy is the TDX module policy.