cgroup-util: make definition of CGROUP_CONTROLLER_TO_MASK() unsigned

Otherwise doing comparing a CGroupMask (which is unsigned in effect)
with the result of CGROUP_CONTROLLER_TO_MASK() will result in warnings
about signedness differences.