tpmtools: regenerate keystore in clean builds

Fix CI clean-workspace TPM tool builds by making the local keystore object depend on the generated root keystore source.

F/CI

Author: danielinux

tools/tpm/Makefile

@@ -91,6 +91,12 @@ debug: all
 swtpm:CFLAGS+=-DWOLFTPM_SWTPM
 swtpm:all
 
+# The TPM host tools consume the generated root keystore just like the
+# bootloader build. In a clean CI workspace, regenerate it through the
+# top-level makefile before compiling the local keystore object.
+$(WOLFBOOTDIR)/src/keystore.c:
+	$(Q)$(MAKE) -C $(WOLFBOOTDIR) src/keystore.c
+
 # build objects
 $(OBJDIR)/%.o: %.c
 	$(Q)$(CC) $(CFLAGS) -c -o $@ $<
@@ -103,6 +109,8 @@ $(OBJDIR)/%.o: $(WOLFBOOT_LIB_WOLFTPM)/src/%.c
 $(OBJDIR)/%.o: $(WOLFBOOT_LIB_WOLFTPM)/hal/%.c
 	$(Q)$(CC) $(CFLAGS) -c -o $@ $<
 
+$(OBJDIR)/keystore.o: $(WOLFBOOTDIR)/src/keystore.c
+
 # build templates
 rot: $(OBJS_VIRT) rot.o
 	@echo "Building Root of Trust (ROT) tool"