Backport fix for transient ExecStart= escaping (e7416db183cb205146fd7fbb4e791b72cdae2b70)

Backport https://github.com/systemd/systemd/pull/25385

Remove selinux bcond in favor of boolean dependency on selinux-policy so that
selinux is only installed if selinux-policy is installed
Add selinux file contexts for /efi
Remove policycoreutils-python-utils dependency from systemd-selinux

Backport fixes for journald crashes and bad behavior when dealing with
Fix changelog date

Revert cpu controller delegation to user@.service commit for FB builds

Fix selinux unsupported directive on centos stream 8

Fix changelog

Backport udev rules fix
Fix selinux module

Bump release for 252.4
Sync from rawhide
Build with libqrencode
Build with libfido2
Build with homed/userdb
Drop pam config directory override
Use python3dist() where applicable
Drop llvm-toolset in favor of having systemd use bpftool gen object
Add back standalone binary packages

Fix split-files.py regex for networkd files on non-C8

Set compile-time fallback hostname to "localhost"

Avoid requiring systemd-pam from -devel subpackage

Revert 32-bit offsets journal commit from hs+fb build

Bump release for 251.4

Manually bump release version for rpmautospec

Align sysusers-generated shell value with upstream systemd default