Add fcontext for sshd pidfile and directory used for privsep

Also allow sshd_t domain to chroot(2) in this directory as explained in
the README.privsep file in the openssh tarball.

Thanks to Russell Coker for this patch
Move the ifdef at the end of the declaration block
Module version bump for pid file directory from Russell Coker/Laurent Bigonville.
Conditionally allow ssh to use gpg-agent

gpg-agent also offers an ssh-compatible interface. This is useful e.g.
for smartcard authentication.
Rename gpg_agent_connect to gpg_stream_connect_agent.
Rearrange gpg agent calls.
Module version bump for ssh use of gpg-agent from Luis Ressel.
kernel/files.if: Add files_dontaudit_list_var interface

This is required for an update of the couchdb policy.
Module version bump for files_dontaudit_list_var() interface from Luis Ressel.
Move bin_t fc from couchdb to corecommands.
Update contrib.
Label /usr/lib/sudo/sesh as shell_exec_t
Module version bump for sesh fc from Nicolas Iooss.
kernel/devices.if: Add dev_rw_loop_control interface
system/mount.if: Add mount_read_mount_loopback interface
Allow mount_t usage of /dev/loop-control

If loopback devices are not pregenerated (kernel option
CONFIG_BLK_DEV_LOOP_MIN_COUNT=0), mount needs to write to
/dev/loop-control do create them dynamically when needed.
Grant kernel_t necessary permissions for loopback mounts

For loopback mounts to work, the kernel requires access permissions to
fd's passed in by mount and to the source files (labeled mount_loopback_t).
Move loop control interface definition.
Rename mount_read_mount_loopback() to mount_read_loopback_file().

Also make kernel block optional since the calls are to a higher layer.
Module version bump for loopback file mounting fixes from Luis Ressel.