vct/server: Filter template image, exp data and firmware base images by allowed extensions