Changes

gsm48_cc_tx_setup: fix speech bearer capabilities

Send the bearer capability IE from 3GPP TS 24.008 § D.1.2 for speech
instead of the result from gsm48_cc_tx_setup_set_bearer_cap() for the
network to MS direction. This is needed, because:

 - We shall send spares for radio (which happens to be the same as
   GSM48_BCAP_RRQ_FR_ONLY in the MS to network direction, see 3GPP TS
   24.008 § D.1.1 and Table 10.5.102).

 - We could send a speech version list in theory that MS are then
   supposed to ignore (end of Table 10.5.103), but this causes bugs in
   some MS so it is better to not send it (OS#6656).

Related: OS#6657, OS#6655, OS#6656
Related: osmo-ttcn3-hacks I8fd33cf2f7fb8a1c34851ecf54fccddd2efd0536
Change-Id: I7046e9244fd9d4301ee2c4df1147a619f753739c