Add a `capabilities` metadata attribute

Add a `capabilities` metadata attribute for listing the "capabilities" or "abilities" that the exploit grants the user.

```ruby
capabilities [
  :arbitrary_file_read,
  :command_exec,
  ...
]
```

This will also require defining a list of command "capabilities".