Prevent activity token leaked to another process

Malicious app could register the organizer via one-way binder call
to disguise as running on pid 0.

Bug: 367266072
Test: verified via the sample app
Flag: EXEMPT bugfix
Change-Id: I51378c7d2da06fb83670abd082a089cfd82d699d