Since android-10.0.0_r37, mediacodec seccomp policy now has two
includes. In AOSP 8.1, minijail is vendor-side.
AOSP 8.1's minijail has a bug, which can't read multiple includes.
All of this together means mediacodec is broken.
This fixes it by overriding vendor's minijail to a working one, in the
hope that vendors didn't change anything in their own minijail
https://issuetracker.google.com/issues/158068181
On a-only, if init reads system/etc/init/mediaswcodec-treble.rc before
apex is available, init will see the /apex/...mediaswcodec file isn't
there and will ignore the process.
Kick-start media.swcodec service on boot when apex is ready
Lights HAL doesn't work on Snapdragon Samsun S10 series for an unknown
reason when started too early, and we don't control its start time.
So just restart it later.
