Add Activity manifest attribute: requireContentUriPermissionFromCaller

The new attribute specifies permissions necessary for launching the
activity via startActivity() when passing content URIs. The default
value is none, meaning no specific permissions are required for the
content URIs. Setting this attribute to other values will enforce the
invoker to have the required permissions. If they fail to have them,
the activity start is denied via a SecurityException. The enforcement
works for content URIs in Intent#getData and Intent#getClipData.

Bug: 293467489
Test: atest WmTests:ActivityStarterTests
Test: atest CtsPackageManagerTestCases:android.content.pm.cts.ActivityInfoTest
Test: atest CtsContentTestCasesRavenwood:android.content.pm.cts.ActivityInfoTest
Test: atest FrameworksServicesTests:com.android.server.uri
Test: atest FrameworksServicesTestsRavenwood:com.android.server.uri.UriGrantsManagerServiceTest
Test: atest CtsContentTestCases:android.content.cts.ActivityRequireContentUriPermissionFromCallerTest
Change-Id: Ifca162d31fa789caa5943b78d1db77c51a5d7f80