Introduce IVmCapabilitiesService HAL

This HAL can be used to provide vendor-specific extensions to VMs. First
use case for this HAL is custom smc filtering project, which provides a
way for some vendor-owner VMs to allow issue vendor-specific smcs. See
go/pkvm-pvm-allow-vendor-tz-services-access for more details

Bug: 360102915
Test: presubmit
Change-Id: Iaf8e3e066f5bda9eae079252720860d362d14426
diff --git a/compatibility_matrices/compatibility_matrix.202504.xml b/compatibility_matrices/compatibility_matrix.202504.xml
index 4b762ca..2c90f6b 100644
--- a/compatibility_matrices/compatibility_matrix.202504.xml
+++ b/compatibility_matrices/compatibility_matrix.202504.xml
@@ -653,6 +653,15 @@
         </interface>
     </hal>
     <hal format="aidl">
+      <name>android.hardware.virtualization.capabilities</name>
+        <version>1</version>
+        <interface>
+            <name>IVmCapabilitiesService</name>
+            <instance>default</instance>
+            <instance>noop</instance>
+        </interface>
+    </hal>
+    <hal format="aidl">
         <name>android.hardware.weaver</name>
         <version>2</version>
         <interface>