sepolicy: Allow Settings to read ro.vendor.build.security_patch

qcom does this globally for every domain in their vendor sepolicy,
but devices not inheriting device/qcom/sepolicy need this.

Change-Id: I7aa147c7a3f1e56fda8dca6e219bd1452dd4af53