[ProfileData] Reject incompatible ExtBinary section flags (#215470)
Reject section-specific ExtBinary flags that do not belong to the given
section type, instead of silently accepting the mismatch. A death unit
test covers applying SecFlagOrdered to SecLBRProfile.