sepolicy: allow recovery read access to /data/media/ files and dirs

Change-Id: I41173d72e86f9cf4d79f7c46166eeb71dc19d2f4
(cherry picked from commit e33cc1d37d3c620bce4fd7c96fcbca912743d7c0)