driver: Do not enable Jailhouse on offlined CPUs

If a CPU was offlined prior to enabling Jailhouse, trying to call
enter_hypervisor() on it will almost certainly crash the kernel.
Avoid this by explicitly iterating over online CPUs only; if a CPU
assigned to Jailhouse wasn't online, we will get -EINVAL instead
of crash.