migration: Accept 'cont' only after successful incoming migration

migration: Accept 'cont' only after successful incoming migration

When a 'cont' is issued on a VM that's just waiting for an incoming
migration, the VM reboots and boots into the guest, possibly corrupting
its storage since it could be shared with another VM running elsewhere.

Ensure that a VM started with '-incoming' is only run when an incoming
migration successfully completes.

A new qerror, QERR_MIGRATION_EXPECTED, is added to signal that 'cont'
failed due to no incoming migration has been attempted yet.

Reported-by: Laine Stump <[email protected]>
Signed-off-by: Amit Shah <[email protected]>
Reviewed-by: Luiz Capitulino <[email protected]>
Signed-off-by: Aurelien Jarno <[email protected]>