Filter out work profile widgets when not allowed by device policy

Existing work profile widgets should be filtered out if keyguard widgets
are disabled on the work profile but not on the main user by device policy manager.

Bug: b/323196422
Test: atest CommunalInteractorTest
Test: atest CommunalSettingsRepositoryImplTest
Test: verify by toggling the setting in TestDPC
Flag: ACONFIG com.android.systemui.communal_hub TEAMFOOD
Change-Id: I0ac2d766e4f1942a99f888f1ba8aff43cd700432