Add acceptable enclave quote statuses to SGX constraints

[kostko]

The CapabilityTEE verification should support enforcement of enclave quote statuses by extending sgx.Constraints to include a field which specifies what is acceptable (could even be strict/non-strict similar to OASIS_STRICT_AVR_VERIFY in runtimes). Note that currently the runtimes can enforce this when establishing secure sessions which is sufficient for security purposes, but it would be useful if one could prevent non-compliant nodes from not even being scheduled. Otherwise this will result in those nodes triggering failures.