Strip invalid domains in DVS#addPackage

If a package is ever updated as part of an OTA, it have may removed
domains that were included in the original set, and so that state
should be evicted when it's re-attached.

Bug: 184562304

Test: atest DomainVerificationPackageTest

Change-Id: Ie90dc390afa89b0c26f73de64b1e513c6fa272a3