sepolicy: confine com.sony.timekeep to timekeep_app domain

[vladimiroltean]

• Previously, the Java app was running in the system_app domain, and it was therefore necessary to add overly permissive rules to the more general domain. These are now given only to the TimeKeep app.