[PATCH OLK-5.10 2/3] kabi: use CONFIG_KABI_RESERVE to isolate bpf cgroup reserve flags