mm/mseal: Seal system mappings in __install_special_mapping()

VM_SEALED_SYSMAP isn’t really a VMA flag, it’s an alias for VM_SEALED or VM_NONE depending on CONFIG_MSEAL_SYSTEM_MAPPINGS. Every caller of _install_special_mapping() on an architecture which supports