Allow processes in the "system" group to read /metadata/ota. am: a71faae86f am: f0c99ee9c7 am: bac6593a1e am: 6d615af7f2

Original change: https://android-review.googlesource.com/c/platform/system/core/+/2656857

Change-Id: I46e30d72dd12310949d281b1707f382f56703068
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>