[RTE-370] Generate valid xfrm when required

[raoulstrackx]

There are two issues with running SGX enclaves on Sapphire Rapids:

• When running debug enclaves, we used to use XCR0 unmodified for the xfrm attribute. But now advanced matrix extensions (AMX) may lead to larger SSA frames (3 pages) than expected. The elf2sgxs tool by default only selected 1 page for SSA frames. When generating a signature, we need to ensure features are turned off when they would lead to larger SSA frames.
• Turning features off, may conflict with one another. XTILECFG and XTILEDATA need to be either enabled both, or disabled both. This PR sets the xfrm attribute accordingly.

Address #565