target/arm: Enforce M-profile VMRS/VMSR register restrictions