Sepolicy: Add theme service as system service

Change-Id: Idfb690be5d35c03610165b914c0a3f2260e68956
cm: Remove prebuilt Term.apk

 * This is free on the Play Store, no need to bake it in.

Change-Id: Iffa24c3f2239ee06deee2fe7d1cec396200e1d79
cm: sepolicy: Remove vold external sdcard rules, moved to main sepolicy

Change-Id: I67756bad2c6e1361ecc0052003f2b4e5e4dbb007
selinux: Downgrade CMFM's domain

the filemanager doesn't need to be in platform_app. Put it in untrusted_app,
especially since it's a possible su client

Change-Id: I164853f2c8721d86b5b90677cb33032a3b491ff5
sepolicy: allow recovery read access to /data/media/ files and dirs

Change-Id: I41173d72e86f9cf4d79f7c46166eeb71dc19d2f4