[CHERIseed] Support TLS relocations

Capabilitites in TLS are fully dynamic and should be
relocated with an initializer function.

Change-Id: Idec226432ebc72b221683a53ddab8621df4cd413