Fix a bug in Phi node translation in cap-stack mode.
Add a really ugly hack so that if we do (statically detectable) negative pointer arithmetic on on-stack values we’ll re-derive the capability from the pointer and the stack capability.