Add QUERY_USERS permission to some UserManager APIs

The followings APIs now accept QUERY_USERS
(and any other APIs that depends on them):

* getUserRestrictionSources
* isSameProfileGroup
* getAllProfiles
* isManagedProfile
* canAddMoreManagedProfiles

Also exposed isProfile as public, and deprecated getEnabledProfiles

Test: atest android.multiuser.cts.UserManagerTest
Bug: 188410712
Bug: 205707885
Bug: 206106797
Change-Id: I4cc4f7078271e42a2bcaa6965c107a6e249e00fc