selinux: add recovery policy
move yuga_gapps into recovery