Add nvme-cli to rescue

Build as root in a real chroot, rather than fakechroot which is increasingly leading to postinst scripts escaping the 'chroot' and getting confused

Don't use a bundled old version of debirf -- patch the system's one