Deny attachment of any device to SDW qubes other than `sd-devices`

[deeplow]

Description

Qubes 4.3 enables preventing accidental attachment of any device to unwanted qubes (which includes any qube in the workstation other than sd-devices. We'll want this out of the box as we transition to 4.3

How will this impact SecureDrop/SecureDrop Workstation users?

How would this affect the SecureDrop Workstation threat model?

User Stories