kernel: refine syscall_hook_manager

- Don't unmark process when setuid if syscall tracepoint is in use
- Remark process when app profile updated
- Ensure zygote is marked on first boot

kernel/selinux/selinux.h

@@ -17,6 +17,8 @@ bool is_ksu_domain();
 
 bool is_zygote(const struct cred* cred);
 
+bool is_init(const struct cred* cred);
+
 void apply_kernelsu_rules();
 
 u32 ksu_get_ksu_file_sid();