arm64: Initial nested virt support

The ARMv8.3 architecture update includes support for nested
virtualisation. If the kernel supports it, allow the user to specify
--nested to start a guest in (virtual) EL2 instead of EL1.

Signed-off-by: Andre Przywara <andre.przywara@arm.com>