Support for sending BTM request frame to upper layer

Framework need to get MBO attributes and WNM mode fields from BTM request frame
Support the feature of BTM request notification

To take this feature, "btm_offload=1" add to wpa_supplicant.conf

Plus, call "MBO CELL_DATA_CAP" private command to advertise cellular capability to AP

Bug: b/154372567
Test: Test with manipulated BTM frames in Hikey960 (Android R-os)

1. Add "btm_offload=1" to "/data/vendor/wifi/wpa/wpa_supplicant.conf"
2. Setup SoftAP and assoc
3. "wl -i [SoftAP if] actframe [STA_MAC_ADDR] 0a07AA010000ff340d02904c07a4d900000000000b00340d02904c0e54d900000000009500dd07506f9a16060100" in SoftAP

the log below is seen in logcat
wpa_supplicant: wlan0: WNM: Send BSS Transition Management Request frame to upper layer

Signed-off-by: Dennis Jeon <dennis.jeon@broadcom.com>
Change-Id: I07137848cef47ee15f750871520119e7181f4c26
diff --git a/wpa_supplicant/config.c b/wpa_supplicant/config.c
index 8a8765b..0d5b285 100644
--- a/wpa_supplicant/config.c
+++ b/wpa_supplicant/config.c
@@ -4328,6 +4328,7 @@
 	config->disassoc_imminent_rssi_threshold =
 		DEFAULT_DISASSOC_IMMINENT_RSSI_THRESHOLD;
 	config->oce = DEFAULT_OCE_SUPPORT;
+	config->btm_offload = DEFAULT_BTM_OFFLOAD;
 #endif /* CONFIG_MBO */
 
 	if (ctrl_interface)
@@ -5111,6 +5112,7 @@
 		    MBO_CELL_CAPA_NOT_SUPPORTED), 0 },
 	{ INT_RANGE(disassoc_imminent_rssi_threshold, -120, 0), 0 },
 	{ INT_RANGE(oce, 0, 3), 0 },
+	{ INT_RANGE(btm_offload, 0, 1), CFG_CHANGED_DISABLE_BTM_NOTIFY },
 #endif /* CONFIG_MBO */
 	{ INT(gas_address3), 0 },
 	{ INT_RANGE(ftm_responder, 0, 1), 0 },