drm/nouveau/secboot: let LS post_run hooks return error