rhine: init.rc fixes for encrypted devices

Postpone some /data setup until post-fs-data, so it applies to
decrypted mounts.

Also enable the sensors service, still in class main, so that it's
running for both the decryption screen (if enabled) and final boot
state.  Fixes CYAN-4682.

Change-Id: Idc8c84b0fb5cbe2db1f202cd3bc6d84b589eb70e
init: Add setup_fs service for userdata

* Used for formatting data after unlock,
  as the userdata partition is zeroed out after unlock,
  but a filesystem isn't created.

Change-Id: I17aba9ed9778431e48f9605d10a7fde8be9b7b86