phpcbf is included when you install PHP_CodeSniffer. Tom McFarlin has written a nice guide on how to install PHP_CodeSniffer and the WordPress Coding Standards Rules for VSCode. If you follow this guide, phpcbf
will be installed in the project root, in ./vendor/bin/phpcbf
You'll find the convert.php script at GitHub