cpu: fix up 'ret' instruction.

We should return to $lr (r15) which is encoded in rb.