runtime: Add CAP_SYS_NICE to the system server capabilities list so it

can (eventually) move arbitrary threads into different cgroups

Signed-off-by: San Mehat <san@google.com>