Make the RKP VM marker affect the sealing CDI

Modify the DICE hidden input to depend on whether the VM is the RKP VM
or not, to ensure that it always gets a different sealing CDI.

Bug: 323523191
Test: atest rialto_test MicrodroidTests
Change-Id: Iaf7d39dfee6ebf316e957434f86070b8cb272e9a
diff --git a/pvmfw/Android.bp b/pvmfw/Android.bp
index 9a2b3ef..6a6d199 100644
--- a/pvmfw/Android.bp
+++ b/pvmfw/Android.bp
@@ -110,6 +110,7 @@
         "libciborium",
         "libdiced_open_dice_nostd",
         "libpvmfw_avb_nostd",
+        "libzerocopy_nostd",
     ],
 }