add "both" option for -format

The remote attestation prototype cannot endorse ISO images, just EFI files. For that it's helpful to make stmgr generate both files and use the EFI only for precomputing measurements.