Add recipe to build the MCS refpolicy.

This is the default policy type used by most (all?) distros that
support SELinux.