target-arm: Make VFP binop helpers take pointer to fpstatus, not CPUState