Verifiable Format Control for Large Language Model Generations