Support configuring capabilities in VCN cell network template

This commit adds the support of configuring required and forbidden
capabilities in the VCN cell underlying network matching template
so that a cell network MUST match the capability criteria to be
selected as the VCN's underlying network.

Bug: 245618320
Test: FrameworksVcnTests(new tests), CtsVcnTestCases
Change-Id: I3ed65ae86e0078fb5f0f6ab311fbc46f915ecdab