Set ACCESS_RESTRICTED_SETTINGS op to MODE_ALLOWED on package level

during package upgrade

OP_ACCESS_RESTRICTED_SETTINGS is only set on the package level. Previous
CL ag/31532264 set it on the uid level, which could cause unexpected
restriction lifting.

Bug: 428637702
Test: Manual
Flag: EXEMPT bugfix
Change-Id: Ice6beeda102e59ca778f525263ef2dce4ae5a8fa