Add additional early_patch functionality

early_patch now executes hooks from a directory, either config/patch/hooks/default or config/patch/hooks/umount.

Those contain scripts which support:

• installing additional packages
• bind mounting or copying modified files from config/chroot_local-includes
• bind mounting or copying additional files with read-write permissions
• setting a default root password

Closes #20268