Allow fapolicyd watch boot and home directories

[zpytela]

The fapolicyd service needs watch_mount and watch_with_perm permissions for fanotify/inotify/dnotify calls on the following directories:

• /boot and /boot/efi directory
• home directories

Note the /boot/efi directory has the dosfs_t label.