Migrate sec log to policy engine

Security log is controlled by a system property and currently
DPM.setSecurityLoggingEnabled is modifying this property directly. This
doesn't allow enablind or disabling security log via any other mechanism
without overwriting that policy. To allow controlling security log via
audit logging API for DPMRH this CL migrates that policy into a integer
policy in the policy engine. That integer is treated as a flag union
which currently has only one flag that corresponds to the existing
DPM.setSecurityLoggingEnabled. Another flag will be added for the new
audit log API so that log buffer will be enabled if either of those
flags is present.

Bug: 295324350
Test: atest MixedDeviceOwnerTest#testSecurityLoggingWithSingleUser
Test: atest MixedDeviceOwnerTest#testSecurityLoggingDelegate
Test: atest OrgOwnedProfileOwnerTest#testSecurityLogging
Test: atest OrgOwnedProfileOwnerTest#testSecurityLoggingDelegate
Test: atest SecurityLoggingTest
Test: manual, with TestDPC
Change-Id: I05235f36827ce41ab67332283749f886d7cf8426