capsicum: fill in some CAP_TODO entries

Specifically:
 - mm/nommu.c version of mmap(2) needs same rights as mm/mmap.c version
 - ioctl(2) just needs CAP_IOCTL for now
 - sync_file_range(2) needs CAP_FSYNC|CAP_SEEK
 - finit_module(2) needs CAP_FEXECVE
 - prctl(PR_SET_MM, PR_SET_MM_EXE_FILE,...) needs CAP_FEXECVE
 - fadvise() needs CAP_NONE
 - retrieving stats over Netlink socket needs CAP_FSTAT
 - mount operation for Coda filesystem needs CAP_FSTAT to determine
   the minor device number for the associated fd