arm64: kasan: ensure that the KASAN zero page is mapped read-only