Copy signed grubx64.efi to support secureboot

Shim verifies the signature of grubx64.efi if secureboot is enabled so
it won't boot ours. Hence, we need to copy ubuntu signed .efi.