Block uninstall if DMRH in a managed user

Previous change introduced a bug - on a personal device with a work
profile the user could uninstall updates from the personal side, thus
downgrading DMRH in the work profile, breaking it. With this change if a
package is DMRH on any managed user, uninstall will be blocked

Bug: 360807442
Test: btest a.d.c.DevicePolicyManagementRoleHolderTest
Flag: EXEMPT bugfix
Change-Id: I9fd8bed4a8203f3dbfa8dc4ea1388e7c8d136d9a