surfaceflinger: move all SurfaceFlingerConsumer data members

Move them and related methods to the base class,
BufferLayerConsumer.

This also moves the latching of mTransformToDisplayInverse and
mSurfaceDamage from acquireBufferLocked to updateAndReleaseLocked,
where LayerRejecter might reject the buffer and return early.

Test: boots
Change-Id: Ib76e8f42a9f9dbe807ba8b335746de561dd98851