ion: add hack for HTC IOMMU camera

HTC liboemcamera requests memory from the CAMERA or IOMMU heaps, which
we cannot provide currently. Since we cannot change liboemcamera, remap
to CP_MM heap if CAMERA heap is requested.

Change-Id: I6b965bb56835583c687f0086efcb153c64cf1e25