[cfi] Adjust RLIMIT_AS by CFI shadow size.

CFI (control flow integrity) implementation is using a MAP_NORESERVE
allocation of up to 2GB is size. Only a tiny portion of it is backed
by physical memory. Take this into account when setting RLIMIT_AS for
media services.

Test: no immediate effect; CFI shadow increase for 48-bit aarch64 can
      be reapplied w/o breaking android boot.
Bug: 64293803

See https://android-review.googlesource.com/#/c/platform/bionic/+/424903/.

(cherry picked from commit f1b05236)

Change-Id: I3fe72edcdaf908f42a1ffdfde645e34263564990