Make sure user services are only run as ceres. Since openssh uses pam login, ssh root@watchIp would open a new systemd user session and start asteroid-launcher or other services as root

msm-fb-refresher: already installed in a MACHINE specific way so we don't need a restrictive COMPATIBLE_MACHINE

systemd: gives right to /dev/mm_interlock and /dev/mm_v3d to the video group to allow to run asteroid-launcher as ceres on tetra

This reverts commit 04acc8b6.

This libhybris recipe only builds against listed compatible
machines. Add bass to the list of compatible machines for
libhybris.

android-system: removes dependency to lxc which required the meta-virtualization layer and which is not used

Factorizes code from asteroid-image and asteroid-image-dev in the asteroid distro and the asteroid-image.bbclass