I've updated my blog post about setting up SecureBoot with shim & GRUB on Gentoo to reflect some recent changes to the kernel installation scripts. I've also added information and scripts to automate updating and removing kernels.
https://www.setphaserstostun.org/posts/secure-boot-on-gentoo-with-shim-grub/