selinux: add domain for Gallery

Gallery needs to read vendor files on treble enabled devices.

This is based on policies written by Eino-Ville Talvala <etalvala@google.com> for Google camera
app.

Change-Id: I0e591c9b2a54c781203d5c49e6d6d65c2f477eaf