qmp: add QMP interface "query-cpu-model-expansion"