cros: Fix unchecked 'Update firmware' issue

Since the Learn more link was within paper-checkbox, it will get
triggered by the on-change event.

Bug: 812183
Cq-Include-Trybots: master.tryserver.chromium.linux:closure_compilation
Change-Id: I29b23fcf6bdeb8e485c36d8e100b39288b3b236a
Reviewed-on: https://chromium-review.googlesource.com/919429Reviewed-by: Alexander Alekseev <alemate@chromium.org>
Commit-Queue: Wenzhao (Colin) Zang <wzang@chromium.org>
Cr-Commit-Position: refs/heads/master@{#536928}

chrome/browser/resources/chromeos/login/oobe_reset.css

@@ -38,6 +38,7 @@ a {
 #tpmFirmwareUpdateCheckbox {
   --paper-checkbox-size: 16px;
   --paper-checkbox-checked-color: var(--google-blue-500);
+  margin-top: 2px;
   size: 16px;
 }
 

chrome/browser/resources/chromeos/login/oobe_reset.html

@@ -72,13 +72,13 @@
               checked="{{tpmFirmwareUpdateChecked_}}"
               disabled="{{!tpmFirmwareUpdateEditable_}}"
               on-change="onTPMFirmwareUpdateChanged_">
-            <div id="tpmFirmwareUpdateContainer">
-              <span i18n-content="resetTPMFirmwareUpdate"></span>
-              <a href="#" hidden="[[isHelpLinkHidden_(uiState_, isOfficial_)]]"
-                  on-tap="onTPMFirmwareUpdateLearnMore_"
-                  i18n-content="learnMore"></a>
-            </div>
           </paper-checkbox>
+          <div id="tpmFirmwareUpdateContainer">
+            <span i18n-content="resetTPMFirmwareUpdate"></span>
+            <a href="#" hidden="[[isHelpLinkHidden_(uiState_, isOfficial_)]]"
+                on-tap="onTPMFirmwareUpdateLearnMore_"
+                i18n-content="learnMore"></a>
+          </div>
         </div>
       </div>
       <div class="bottom-buttons flex layout horizontal">