hammerhead: add APKs as PRODUCT_PACKAGES
use LOCAL_CERTIFICATE := platform for re-signing