Add Build-Depends on shim-signed and grub-efi-ARCH-signed for
amd64/i386/arm64
Use the signed shim and grub for all 3 arches for EFI images
efi-image: use an extra command-line arg to track if we should be
using signed grub and shim etc.