Code review comment for ~ubuntu-core-dev/grub/+git/ubuntu:lp.1795291

Just skipping vmlinuz binaries where .efi.signed exist seems like a better approach IMO, we can just do that by adding a

  if [ -e "$kernel.efi.signed" ]; then
   continue
  fi

before or after the dpkg check.