s4-rpc_server/lsa: Use samdb_system_container_dn() in dcesrv_lsa_get_policy_state()