Merge "Specify is_fixed_read_only: true for net security mainline trunk stable flag" into main