MMU: support loads/stores that cross page boundaries

Fixes some strange issues with Rogue Squadron 3 in JIT mode.
Should this be FLAG_WRITE instead of FLAG_READ?