KVM: guest_memfd: Introduce per-gmem attributes, use to guard user mappings

为guest_memfd引入maple树跟踪每inode的private/shared属性，用filemap_invalidate_lock保护；在kvm_gmem_get_pfn中先释放folio引用再解锁，避免转换请求看到陈旧高refcount。