Limit per-device policy files to a well-defined sepolicy prefix.

Avoid any future collisions with the use of .fc or .te suffixes in the
per-device directories.  If we want multiple file support, add a separate
subdirectory for sepolicy files.