ANDROID: KVM: arm64: Don't run a protected VCPU if it isn't runnable

Don't run a protected VCPU in pKVM if it isn't in a runnable PSCI
state. For protected VMs, the PSCI state is the reference state
for whether they are runnable or not.

Bug: 278749606
Bug: 373638114
Reported-by: Dmytro Maluka <dmaluka@google.com>
Signed-off-by: Fuad Tabba <tabba@google.com>
Change-Id: I17cc60852aa45225e65fe810f9b196e3afe88a70
(cherry picked from commit f37e14cc)
Signed-off-by: Lee Jones <joneslee@google.com>