Fix system policy to mean overlays on /system

Currently any preinstalled overlay fulfills the system policy. This
change makes it so only overlays on /system fulfill the system policy.

Bug: 124235854
Test: manual
Change-Id: I6aa75695f0f5a493f5e9b810d9000403826da331