drm/nv50/kms: directly use cursor image from userspace buffer