sepolicy: add rules for updater and update_engine

* We need special exceptions for update_engine scripts because we
  handle backuptool operations through it.

* priv_app needs to be able to make ota package dirs in order to
  put the ota in the correct spot.

Change-Id: I39d9d43ea4eb9e567c6ee24a4cd4f8969cd2bcdd
6 files changed