mesa: adjust BRK/CONT BranchTarget to always point to ENDLOOP instruction