Adjust securedrop-workstation-grsec dependencies

libelf-dev is a leftover from the u2mn kernel module builds that we
needed on buster/4.0 but haven't since.

Switch qubes-kernel-vm-support to an unversioned `Depends` as it's
only needed in the postinst and the necessary version is already in
both bullseye and bookworm.

debian/control.j2

@@ -39,8 +39,7 @@ Description: Linux kernel debugging symbols for {{linux_build_version}}-{{versio
 Package: securedrop-workstation-grsec
 Section: admin
 Architecture: {{debarch}}
-Pre-Depends: qubes-kernel-vm-support (>=4.0.31)
-Depends: linux-image-{{linux_build_version}}-{{version_suffix}}, libelf-dev, paxctld
+Depends: linux-image-{{linux_build_version}}-{{version_suffix}}, paxctld, qubes-kernel-vm-support
 Description: Linux for SecureDrop Workstation template (meta-package)
  Metapackage providing a grsecurity-patched Linux kernel for use in SecureDrop
  Workstation Qubes templates. Depends on the most recently built patched kernel