Capabilities should be bitfield

[hanno-becker]

Currently, we define capabilities as consecutive integers. We should define them as bits at different positions, so capabilities can be combined and tested via &. This allows defining a single capability and check for every capability-guard.

• See Capabilities should be bitfields mldsa-native#1302