Add bundle validations on request/response and state params.

This is the implementation for approach#2 in go/isolated-bundle-validation to ensure that bundle being passed to isolated process is essentially read-only.

AndroidFuture<T> does not support any raw Binder interfaces.  For
instance, AndroidFuture<ICancellationCallback> would crash due to
java.lang.ClassCastException at run time. You must use IBinder
instead and manually create a stub object in the receiver side. Hence the generic usage of AndroidFuture across.

Bug: 326618319
Change-Id: Idb7aad4dca45d29683ae9b85532f790f3cf643ad