ws: cockpit.socket should be able to listen on reserved ports

Update the SELinux policy.

Closes #609
Reviewed-by: Marius Vollmer <marius.vollmer@redhat.com>