tenderloin: initial sepolicy and move lvm.static to boot.img

* sepolicy won't allow us to run exectuables from other partitions
  during init so we move lvm.static to our boot.img, increasing the
  image size by roughly 1.4mb (eek!) thankfully we still have some
  extra space after a boot.img, recovery.img and webos img, but not
  really enough for another whole image

* fix up init to use this and set domains for serial and lvm services

* initial sepolicies

Change-Id: I7b4b770f02261e02a1a4ac3b3c06d8178e7800c5