Fix include guard comment, which was out of sync.
Provide a global SYSCTL_DECL() for security.cheri and move cheri_stack.c's
sysctl to that file from cheri.c.
Declare a sysctl subtree for CHERI statistics, security.cheri.stats.