Allow unconfined users to transition to dpkg_t domain

dpkg is now using rpm_execcon()/setexecfilecon()-like function to
transition to the dpkg_script_t domain. This function will fail in
enforcing mode if the transition is not allowed.
Module version bump for unconfined transition to dpkg from Laurent Bigonville.
Merge with upstream
Add fcontext for rsyslog pidfile
Module version bump for logging fc patch from Laurent Bigonville.
Merge upstream
Label /usr/lib/postfix/showq as postfix_showq_exec_t
Module version bump for postfix showq fc from Laurent Bigonville.
Merge upstream
Fix bug 496328 - Properly handle chroots

Thanks to Luis Ressel for the patch.
Fix bug #499036 - avc_running assertion fails otherwise
gpg: Create gpg_agent_connect interface
Rename gpg_agent_connect to gpg_stream_connect_agent.
Module version bump for gpg agent interface from Luis Ressel.
Properly label git-daemon and gitweb.cgi on Debian
Whitespace fixes in git.fc.
Module version bump for debian git fc entries from Laurent Bigonville.
Minor updates to couchdb policy
couchdb: Add separate domain for couchjs

couchjs requires 'execmem', which isn't neccessary for the rest of
couchdb.
couchdb: Dontaudit denials caused by Erlang's disksup