OK... its bootable again, and secure boot is working, I only ran your update_UEFI-CA2023.ps1 script, I preume thats all you expected.
Its booting, so I ran your check-uefi.bat to get a report and its output is
it also had the option 3..
but both option 1 is what I have been doing and option 2...