Swap the malloc upwards as it can now no longer depends on SB header
crypto init which filled the SB header with additional data. Now
the SB header crypto operation and malloc of the image are truly
separate entities. This also groups the SB header crypto operation
together nicely.

Signed-off-by: Marek Vasut <marex@denx.de>