Honor app visibility when query permission group

The permission group itself may not be visible to the caller. Apply
app visibility check to permission group before returning.

Bug: 202386106
Test: atest PackageManagerTest
Test: atest GtsPermissionControllerHostTestCases
Test: atest CtsBackupTestCases
Test: manually using the PoC in the buganizer to ensure the symptom
      no longer exists.
Change-Id: I72d2028ec01d9d2f21a6a81d3aa6a5302b539bf4