SDK-stub controlled dex2oat verification

Allow dex2oat to further limit the resolved (boot classpath) symbols
during verification according to an additional list of public SDK files.

The additional SDKs can be specified as regular classpath (a list
of dex files) and has the effect of limiting what can be resolved from
the boot classpath. The extra checks are performed by comparing the
symbol descriptors and do not replace common verification access-checks
flow.

Bug: 111442216
Test: test-art-host
Change-Id: Idc13722f34b591d7f858ebeb94bd6f568102b458
21 files changed