x86/vmscape: Add conditional IBPB mitigation (CVE-2025-40300) | HOL Guard CVE