Add missing SELinux policies to swap volume/file setup
    
    This fixes systemd-logind SELinux denials. We just use var_t for the
    subvolume root (other stuff in /var/* does this too, so it should be
    OK).