Remove hard-coded references to candidates

It seems wrong to hard-code the candidate names when they are
available from the server.  It also makes it hard to add new
candidates.  The scripts pretty much work with a really small
change to gvm-use.sh, but the tests also rely on the PATH being
set, so there is a change to the tests as well to make them pass.