Link efi programs with -pie rather than -shared

This was causing build failures in CheriBSD where we were passing -pie
already by default.

Reviewed By: andrew
Differential Revision: https://reviews.freebsd.org/D24787

(cherry picked from commit 253e820a4db794c4c5e39e8e6d6bf2775f25d0cc)