[PATCH v2] cxl/mbox: Fix missing variable payload checks in cmd size validation