make prebuilt .apks require LOCAL_CERTIFICATE

Require people who check in new prebuilts to decide what keys they
should be signed with, rather than having a fire drill every time we
go to sign a build and discover new prebuilts.