Mount /boot as Read Only by default

The content of /boot is managed by rpm-ostree & bootupd on Fedora Atomic Desktops so we should mount it as Read Only to avoid mistakes from users.

A common mistake is running grub2-mkconfig -o /boot/grub2/grub.cfg or similar commands, which should never be done on Fedora Atomic Desktops.