Merge "mediacodec: add GPU access policy" into main