Protected-file overwrite via symlinked backup tree

Insecure temporary directory handling in openSUSE sdbootutil allows local users to disclose PCR data or overwrite protected files. The update-predictions service copied /var/lib/pcrlock.d into the predictable /tmp/pcrlock.d.bak tree and later restored it without securely creating the backup directory, so an attacker-controlled tree or symlinks redirected those privileged copies. On builds before 5880246d3a02642dc68f5c8cb474bf63cdb56bca, a local account must pre-create the backup path before the privileged service runs; consequences are limited to reading copied PCR-lock data, corrupting a later restore, or overwriting protected files with that data.