Merge "Set up common sepolicy for CHRE" into main