os: deprecate the -enable-fips option and QEMU's FIPS enforcement