Give StringFromFormat a printf format attribute.

It gives StringFromFormat printf style arguments that should be type-checked against a format string.