The TPM tracks the state of the secure boot and the bios, that log is stored in the TPM itself the next time you’ll try to boot into windows it will see that something happened and bitlocker will lock itself out.
Do this experiment.
Boot into any Linux live CD on a machine with bitlocker enabled.
No, the TPM doesn't retain PCR measurements over reboots, and the log (rather than the composite PCR value) is handled by the firmware and the OS and the TPM has no idea it exists.
Do this experiment.
Boot into any Linux live CD on a machine with bitlocker enabled.
Reboot and see what happens.