Refs freedomofpress/securedrop#7210

noble ships with Linux 6.8, let's see if we can get a 6.6 grsec patched version working. That would be ideal since we can stay in sync with the workstation too. If that doesn't work, a short-term patch for 6.8 is available, as well as beta for 6.10.