- Add the GrapheneOS package hook mechanism - Ensure OpenEUICC and EuiccSupportPixel are only enabled in the system user - Prevent EuiccSupportPixel interactions - Remove INTERNET permission from EuiccSupportPixel Signed-off-by: Tad <tad@spotco.us>