Enforce that callers to matchesCallFilter have either listener access or read_contacts permission.

This constraint is because matchesCallFilter potentially exposes contact information for users whose DND settings involve only allowing calls from contacts or starred contacts.

Bug: 192592755
Test: NotificationManagerServiceTest, NotificationManagerTest#testMatchesCallFilter_*
Change-Id: I8e7c8b6994cb9668e22c3a7fc017d4401338369d