msm8998: Add sepolicy rules for A/B builds

A/B builds require the update engine and some other components to
have access to particular block devices which are eligable for A/B
updates.

Change-Id: I0695762127d91389c9ae749ae8ab713b0b5c2102