sepolicy: Fix denials related to extended location services

 * Also snuck in GPU thermal control.

Change-Id: I5f0fe6a8c48b9a39e3770cca709a9cb7b3943f85