Require Opt-In by PI Creator for BAL

Only use the privileges of the PendingIntent's creator, if the creator
explicitly opts in to grant its privileges.

This change is flag guarded and target SDK gated.

Bug: 296478951
Test: atest BackgroundActivityLaunchTest
Change-Id: I25100ce1d24a4201fdbb230ad1eb7e47bd755588