Enable SELinux denials collection based on flag

The new flag selinux_logs_collect is used to collect SELinux denials for
all domains. This flag is used to interpret the DeviceConfig feature
security/selinux_audit_job_enabled. This flag should be enabled only on
droidfood/trunkfood devices.

The previous behaviour for sdksandbox is left as-is for production
builds.

Bug: 372950125
Flag: com.android.server.selinux.flags.selinux_logs_collect
Test: adb shell cmd stats print-logs 1
  adb shell cmd jobscheduler run -n SelinuxAuditLogsNamespace -f android 25327386
  adb logcat | grep '(799)'
Change-Id: Id375472194e4e6fafac5fc7c68b9dc8142f72dff