selinux: Add CM-specific file_contexts

Change-Id: Ie70c59acedbb7be2f5b34a83c1d3d011f440ba05