WithSecureBootPolicyProfile and WithBootManagerCodeProfile should support shim's revocations.efi binary

[chrisccoulson]

Shim has the ability to apply SBAT revocations that are wrapped up in a separate signed PE image. We need support for this in the profile generation, as verifying the new binary will result in additional verification and measurements to PCR4 even though no code is executed.