Okay, so modifying the reform-hw-setup script to add dmesg does work with the latest v4 image.
However, if you then run reform-setup-encrypted-nvme and then reboot the machine, the keyboard still doesn’t work.
My guess is that reform-hw-setup gets run after luks is already setup.