Add missing permission checks for adding permission listeners.

They were in the old PermissionManagerServiceImpl but missing in
ag/20684040. The new subsystem is only enabled in V+ so we can just fix
it directly.

Also added the permission check for removing despite that the old method
was only enforcing not instant app, because the removing API is
annotated with requiring the permission, and anyone currently able to
add will still remain able to remove since it's the same permission.

Bug: 263504888
Test: presubmit
Change-Id: Ie5688abdbc4d9039c3f7c42f3d253e69f7cc899d