SELinux: constrain policy max version to 24

Also remove deprecated ro.boot.selinux property (no longer parsed
by init correctly).

Change-Id: I7dda39bf7befcf0eaf818c136055a474631092f8