[AppsFilter] separate classes for read and write

Adopted the same structures as ComponentResolver. This allows the
snapshot'd AppsFilter to access fields without holding a lock because
everything is read-only.

BUG: 228712570
Test: forrest runs
Change-Id: I9e489f944aba56470a83bb9749cac72d987ac177