f903842054
bg-upd's own sepolicy domain (packages/apps/BgUpd/sepolicy, in its own repo) now gets pulled into BOARD_SEPOLICY_DIRS unconditionally alongside its PRODUCT_PACKAGES entry, since it's a core PawletOS system app. PAWLET_SECURITY_PATCH/PLATFORM_SECURITY_PATCH didn't exist anywhere before — device previously just inherited whatever default date came from upstream. Paired with PawletOS-Build/docs/security-patch-process.md and scripts/check_security_patch.py.