ANDROID: pkvm: vmx: Enforce protection to pVM's CS and SS AR byte

The CS and SS access rights are usually used by the host to query CPL or
emulate instructions for the npVM. There is no need to deliver these if
it is a pVM.

Bug: 391539939
Test: pKVM works
Upstream-Task: 402758258

Change-Id: Ibcb65724f28f3e555bfe0e00c064aa26b87be3e4
Signed-off-by: Chuanxiao Dong <chuanxiao.dong@intel.com>
Signed-off-by: Dmytro Maluka <dmaluka@google.com>