kernel: refine syscall_hook_manager

- Don't unmark process when setuid if syscall tracepoint is in use
- Remark process when app profile updated
- Ensure zygote is marked on first boot

kernel/setuid_hook.c

@@ -148,7 +148,7 @@ int ksu_handle_setresuid(uid_t ruid, uid_t euid, uid_t suid)
         }
         ksu_set_task_tracepoint_flag(current);
     } else {
-        ksu_clear_task_tracepoint_flag(current);
+        ksu_clear_task_tracepoint_flag_if_needed(current);
     }
 #else
     if (ksu_is_allow_uid_for_current(new_uid)) {