Merge "Only allow debuggable Microdroid VMs to mount /vendor" into main