feat: add fchownat wrapper and syscall coverage test

Expose the fchownat libc wrapper and validate its behavior in the metadata permission syscall coverage tests, including expected unsupported and permission errors.