fix python testsuite failing on rawhide due to CAP_LAST_CAP
    
    Clamp CAP_LAST_CAP at /proc/sys/kernel/cap_last_cap's value in the
    Python bindings test if possible, otherwise use the value from
    <linux/capability.h> since the kernel now has 37 capabilities upstream,
    but our builders are not that up to date.