Move adbd into enforcing on user devices

Change-Id: Ic5aae78d575dba50d0a4bb78747da3ba4b81fb7b

adbd.te

 # adbd seclabel is specified in init.rc since
 # it lives in the rootfs and has no unique file type.
 type adbd, domain;
-permissive adbd;
+
+userdebug_or_eng(`
+  permissive adbd;
+')
+
 domain_auto_trans(adbd, shell_exec, shell)
 # this is an entrypoint
 allow adbd rootfs:file entrypoint;