cgroup: move css_set_rwsem locking outside of cgroup_task_migrate()