Both secure boot support and the fix for this KB installation are now available for testing: https://xcp-ng.org/forum/post/41541