Update crosvm pin and build hacks, then package the executable

[Databean]

This still requires --enable_sandbox=false when used with --host_substitutions=all, but it's good enough for now.

Tested that it works with --enable_sandbox=false for --gpu_mode=guest_swiftshader and --gpu_mode=gfxstream.

Bug: b/402274999