implement linux font whitelist as defense-in-depth

For the fonts, I think it might be time to customize font.system.whitelist also for Linux, at least as a defense-in-depth

But then we never know if the font config is correct? Does that matter, as long as we test e.g. resistor

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information