Initial app filtering logic

This change adds support for filtering apps from one another based on
the declared <queries> tags they have in their manifest. By default,
enforcement of the checks will be bypassed via app op.

Test: atest AppsFilterTest
Test: visibility limited after `adb shell appops set --uid <pkg> QUERY_ALL_PACKAGES ignore
Test: blocking logged after `adb shell appops set --uid <pkg> QUERY_ALL_PACKAGES deny
Bug: 136675067
Change-Id: I7b0c3714298aac183dfe2ae9e94097587648d59f