Update LockSettingsService to support hardened FRP

This change does three things:

1.  Broadcasts a new protected intent to notify system apps such as
    GMSCore of LSKF changes so they can react by updating FRP data.
2.  Deactivates FRP (if active) when LSKF authentication is performed
    using the FRP credential.
3.  Modifies LockSettingsService to use the new PDB API to query for
    FRP status, rather than relying on the SECURE_FRP_MODE property,
    which can more easily be manipulated by attackers.

Ignore-AOSP-First: Depends on internal changes that can't go into AOSP yet.
Bug: 290312729
Test: atest com.android.server.locksettings
Change-Id: If15ab387e86b5cdcf271085d414ce39ff3a04a83