Add extra security checks for TileService API

When requesting a tile to be added, the TileService should be exported.
Also, the requesting application should be in the foreground, so the
user cannot get unexpected requests.

Test: CTS tests
Test: manual
Fixes: 199770909

Change-Id: I2e131bf2fd3de91767e7604768bc0141ef3cd427