WriteElf always wrote the program headers right after the ELF header, which only matches e_phoff set to 0x40. ELFs patched with SPRXPatcher have the table relocated to the end of the file, so the rebuilt ELF has no program headers at e_phoff and fails to load as of PR #19889

Write the program headers at the e_phoff value after the segment data and the section headers so that the segment data cannot overwrite it. Retail SELFs are unaffected (e_phoff is 0x40 and segment 0 already contains identical bytes).

Fixes #19901 (it affects LBP games patched with Refresher using SPRXPatcher in order to patch a dangerous multiplayer exploit and in general any ELF patched by SPRXPatcher), as long as the patched EBOOT provides a correct phdr_offset value (Refresher doesn't, but this is a fix on their tool, not on RPCS3. RPCS3 just needs to handle relocated program headers in order to support SPRXPatcher ELFs again).

Tested on both retail SELF and SPRXPatcher fSELF