Add SEPolicy for device config service

A new mainline module that will have the device config logic requires a new service (device_config_updatable).

Bug: 252703257

Test: manual because logic that launches service is behind flag

Change-Id: I4ffba0c7d2afc44af8438b7d84d836e42388bd7d
diff --git a/private/compat/33.0/33.0.ignore.cil b/private/compat/33.0/33.0.ignore.cil
index 30a7e35..7494252 100644
--- a/private/compat/33.0/33.0.ignore.cil
+++ b/private/compat/33.0/33.0.ignore.cil
@@ -15,6 +15,7 @@
     device_config_camera_native_prop
     device_config_memory_safety_native_boot_prop
     device_config_memory_safety_native_prop
+    device_config_updatable_service
     device_config_vendor_system_native_prop
     devicelock_service
     fwk_altitude_service
diff --git a/private/service_contexts b/private/service_contexts
index 6af5eab..db48f62 100644
--- a/private/service_contexts
+++ b/private/service_contexts
@@ -203,6 +203,7 @@
 dataloader_manager                        u:object_r:dataloader_manager_service:s0
 dbinfo                                    u:object_r:dbinfo_service:s0
 device_config                             u:object_r:device_config_service:s0
+device_config_updatable                   u:object_r:device_config_updatable_service:s0
 device_policy                             u:object_r:device_policy_service:s0
 device_identifiers                        u:object_r:device_identifiers_service:s0
 deviceidle                                u:object_r:deviceidle_service:s0