sepolicy: mount firmware partitions with firmware_file context

* we don't need to give ueventd and init_shell access across
  the entire vfat context

Change-Id: Ib65e1dbf46931f26350a3ffc8660971ecb03470e
Merge remote-tracking branch 'cm/cm-12.0' into HEAD