Send placeholder OOS ServiceState when subId goes invalid

When subId for a phone becomes -1, we would like to leave service
state listeners in a correct terminal state, so broadcast a placeholder
OOS state to the phone's old subId.

Bug: 162395073
Test: manually remove SIM and verify notification on previous subId
Change-Id: Id0e150dacbd762a2e5e801d200241334d10a504d