The chairman of Marks & Spencer has told MPs the company is still in "rebuild mode" - and will be for "some time to come" - following a cyber attack which led to empty shelves and limited online operations for months.