[KernelCache] Place synthetic sections after the cache's address range

This ensures they do not overlap with any images that may later be loaded from the kernel cache.

Fixes https://github.com/Vector35/binaryninja-api/issues/7634.