I have removed the Feature Restricton of Corosync, that it is also available, because it is availbale in the Citrix Hypervisor 8, but I think you aren't allow to distribute this Feature, as it isn't Open Source. I wanted to test the GFS2 Feature.
I have added Corosync in additional_feature and in keys_of_additional_features the same I also did for the UEFI Secureboot.
I added it in additional_feature with the Name "GuefiSecureBoot" and in "keys_of_additional_features" with "GuefiSecureBoot, (Negative, "restrict_guefi-secureboot");"
I hope it is clear what I did.
I forgot to save the patch File otherwise I could send it to you. The Compilation of the Package was done with your xcp-ng-build-env.