Add ident-like blobs to shim.efi for version checking.

I feel dirty.
Improve PE image bounds checking.

Signed-off-by: Peter Jones <pjones@redhat.com>