kho: make sure scratch size is always aligned by CMA_MIN_ALIGNMENT_BYTES (CVE-2026-72169) | HOL Guard CVE