qat: update 4xxx capabilities handling

Some capabilities were not properly fused out based on
the hardware slices. Hence updated the function accordingly.
Both PF and VF are changed.

This change also streamlines capability handling for SYM service:

• Lack of UCS slice does not mean that CIPHER capabilities are not available.
• SYM capabilities should be considered disabled only if both AUTH and CIPHER capabilities are not present.
• AUTH capability shouldn't disable CIPHER.

SMX slice mask for qat_4xxx is also corrected to check for
both SM3 and SM4 support.

Reviewed by: markj, ziaee
MFC after: 2 weeks
Sponsored by: Intel Corporation
Differential Revision: https://reviews.freebsd.org/D50379

(cherry picked from commit 4da5c15e5c84738903fd306b54b18a0aaf166d5f)