Merge "apex_sepolicy_tests: check apex roots are search-able" into main