metadata: document 'last_cap' ABI

Lets make clear that user-space can expect 'last_cap' to be equal to
/proc/sys/kernel/cap_last_cap. User-space can pre-allocate sufficient
array space this way, without checking it on each item.

Signed-off-by: David Herrmann <dh.herrmann@gmail.com>