Add CM SELinux policies

Credit to CM and those who contributed!

cm: Fix global selinux policy inclusion

We're adding CM-specific policies to an overlay instead of patching
external/sepolicy, so we need to make sure it's included to prevent
misbehaving systems

Change-Id: I7989a1093f9abc8360d492e73a860eb4afad10ad

Add auditd

Change-Id: I54717edbeb9677e53bdd01e6519edd30c387bfe8