[rom_ext] Add device_id to unlock owner operation challenge request

[jettr]

Description

It would be nice to ensure that the unlock request for a device is locked to a specific device id in addition to protecting it against replay attacks (e.g. nonce).

Having the device id part for the unlock challenge that needs to be signed by the owner keys also helps with record keeping and ensuring that a request is valid for only a specific device. This also allows the ability for infrastructure to collect votes based on device id, and then the infrastructure will sign any nonce value.