build: Extract trusted-firmware-a.mk