feat(ioctls): Move SGX ioctls to sgx crate

### Is there an existing issue for this?

- [X] I have searched the existing issues

### Description

SGX_IOC_ENCLAVE_RESTRICT_PERMISSIONS has to be called from the enclave, which beans that SGX backend is not an appropriate place to hold the ioctls.

### Acceptance Criteria

_No response_

### Suggestions for a technical implementation

_No response_