Uses a vendor APEX for cuttlefish runtime resource overlays.

Bug: 199200417
Test: Observe all RROs still enabled by default.
Test: adb shell pm create-user <name> 3 times for a total of 4 users.
      adb shell pm create-user <name> one more time fails, due to
      max user count reached.
      Change config_multiuserMaximumUsers from 4 to 6.
      m <RRO apex>; adb install <RRO apex>; adb reboot;
      adb shell pm create-user <name> 2 more times for a new total
      of 6 users.
Change-Id: I19c13b4d5d2fbeba3b80e1f3f692450407eb6eb2
diff --git a/apex/com.google.aosp_cf_x86_64_phone.rros/Android.bp b/apex/com.google.aosp_cf_x86_64_phone.rros/Android.bp
new file mode 100644
index 0000000..53fc4bf
--- /dev/null
+++ b/apex/com.google.aosp_cf_x86_64_phone.rros/Android.bp
@@ -0,0 +1,27 @@
+apex_key {
+    name: "com.google.aosp_cf_x86_64_phone.rros.key",
+    public_key: "com.google.aosp_cf_x86_64_phone.rros.avbpubkey",
+    private_key: "com.google.aosp_cf_x86_64_phone.rros.pem",
+}
+
+android_app_certificate {
+    name: "com.google.aosp_cf_x86_64_phone.rros.certificate",
+    certificate: "com.google.aosp_cf_x86_64_phone.rros",
+}
+
+apex {
+    name: "com.google.aosp_cf_x86_64_phone.rros",
+    manifest: "apex_manifest.json",
+    key: "com.google.aosp_cf_x86_64_phone.rros.key",
+    certificate: ":com.google.aosp_cf_x86_64_phone.rros.certificate",
+    file_contexts: "file_contexts",
+    use_vndk_as_stable: true,
+    updatable: false,
+    // Install the apex in /vendor/apex
+    soc_specific: true,
+    rros: [
+        "cuttlefish_overlay_frameworks_base_core",
+        "cuttlefish_overlay_settings_provider",
+        "cuttlefish_phone_overlay_frameworks_base_core",
+    ],
+}