lib{c,sys}: expose cap_sandboxed from libc/gen

It's a thin wrapper on cap_getmode() implemented in libc, not a system
call so the symbol should have been exposed by libc/gen/Symbol.map
alongside the implementation.

Reviewed by: kib
Differential Revision: https://reviews.freebsd.org/D44110