Allow hal_oemlock_citadel permission to call citadeld

oemlock@1.0-ser: type=1400 audit(0.0:260): avc: denied { call } for scontext=u:r:hal_oemlock_citadel:s0 tcontext=u:r:citadeld:s0 tclass=binder permissive=1

Bug: 152732073
Signed-off-by: Syuan Yang <syuanyang@google.com>
Change-Id: I02ceb1ba013a7c0812f02a283b8550d05c8dde82