x86/speculation: Use IBRS if available before calling into firmware