vm_fault: Move nera into faultstate

This makes it easier to factor out pieces of vm_fault(). No functional
change intended.

Obtained from: jeff (object_concurrency patches)
Reviewed by: kib
MFC after: 2 weeks
Differential Revision: https://reviews.freebsd.org/D33016