Restrict prlimit64 syscall as getrlimit in CrOS IME Service sandbox.

A base lib used by CrOS IME shared lib (internal repo,
running in CrOS IME Service) started invoking getrlimit
syscall circa Dec 2024, which can manifest as prlimit64
that violates the current sandbox policy.

Bug: b:431094157
Change-Id: I7d2cdb91f9ae341d885686c79dee252ab639e401
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6810365
Reviewed-by: Darren Shen <shend@chromium.org>
Reviewed-by: Jorge Lucangeli Obes <jorgelo@chromium.org>
Reviewed-by: Matthew Denton <mpdenton@chromium.org>
Commit-Queue: Bao-Duy Tran <tranbaoduy@chromium.org>
Cr-Commit-Position: refs/heads/main@{#1496108}