r600g: move CB_TARGET_MASK setup into new cb_misc_state