Use a deterministic salt to avb sign vendor_kernel_boot.img

This helps with hermetic builds.

Test: presubmits
Bug: 420672950
Change-Id: I10e436d86a6e043f908c1dfeff8b331b6c61a3a6
diff --git a/core/Makefile b/core/Makefile
index 388a338..9338c17 100644
--- a/core/Makefile
+++ b/core/Makefile
@@ -1858,6 +1858,7 @@
 	    --image $@ \
 	   $(call get-partition-size-argument,$(BOARD_VENDOR_KERNEL_BOOTIMAGE_PARTITION_SIZE)) \
 	   --partition_name vendor_kernel_boot $(INTERNAL_AVB_VENDOR_KERNEL_BOOT_SIGNING_ARGS) \
+	   --salt $$(sha256sum $(BUILD_NUMBER_FILE) $(BUILD_DATETIME_FILE) | cut -d " " -f 1 | tr -d '\n') \
 	   $(BOARD_AVB_VENDOR_KERNEL_BOOT_ADD_HASH_FOOTER_ARGS)
 else
 $(INSTALLED_VENDOR_KERNEL_BOOTIMAGE_TARGET):