mm/madvise: share cold and pageout walk setup

madvise_cold() and madvise_pageout() each open-code the same mmu_gather and page-walk sequence, differing only in the pageout flag they pass to the walk. Move that sequence into madvise_lru_vma_range