[TF-A] Allow platforms to deny CPU power off request