Add DomainVerificationManager

Contains the core SDK @SystemApi portion of the domain verification
APIs, including the state codes and get/set methods for package/user
state.

Set methods are gated by corresponding permissions, but get methods
were left available as general @SystemApi in case someone finds a use
case for them.

Adds a new exception which allows the manager to be more specific in
what caused a failure.

Exempt-From-Owner-Approval: Already approved by owners on main branch

Bug: 163565712

Test: none, just API interfaces, will be tested with implementation

Change-Id: I86802fe4b88a8a0f63a1798944c5d8c3a3bab09b