kho: validate preservation metadata in kho_restore_vmalloc()

kho_restore_vmalloc() currently dereferences preservation before checking for NULL, does not reject unknown KHO vmalloc flags in kho_flags_to_vmalloc(), and does not validate preservation->first.phys,