SEPolicy:  add service contexts
SEPolicy:  remove dhcp.te, keystore.te, & unneeded perm in app.te
switch to staticly-linked 'busybox' & adjust symlinked commands
reenable non-PIE 'tf_daemon' - requires a patch to bionic/linker
add 'NvCPLSvc.apk' as a /vendor pkg & adjust SEPolicy accodingly