SELinux: su: update policies

- Integrate policies from domain.te (fixes ES File Manager which uses unix socket)
- Allow platform_app to use su

Change-Id: Ia7eee05a7bda51b24caa156248e16ac19911fee7