Add restorecon.sh

After flashing, /system is left unlabeled.  This is not
picked up by the init.d script, so manually restore selinux
labels at the end of the updater-script.