Merge changes from topic "change-shared-user-apk-cert-pi-dev" into pi-dev

* changes:
  Allow changing signing cert for system apps that use shared users
  Revert "Allow shared users to rotate signing certs in an OTA"