kitakami-common: sepolicy: Address more critical denials

allow priv_app alarm_boot_prop:file open;

allow priv_app alarm_instance_prop:file getattr;

allow priv_app device:dir open;

allow priv_app proc:file open;

allow priv_app proc_interrupts:file open;

allow priv_app rootfs:dir { rmdir write };

allow priv_app rootfs:file { create write };

allow priv_app sysfs_android_usb:file open;

allow system_server app_zygote:process getpgid;

allow system_server default_android_hwservice:hwservice_manager find;

allow system_server exported_camera_prop:file r_file_perms;

allow system_server hal_light_default:process signal;