Add WIU/BFSL allowlisting to MediaButtonReceiverHolder.send

This will replace the existing capability propagation via
BroadcastOptions. Specifically, it avoids accidentally propagating
BAL abilities to the receiver.

Bug: 385736540
Flag: com.android.media.mediasession.flags.add_wiu_allowlisting_to_media_button_receiver_holder_send
Test: Verified exploit in b/385736540 is no longer possible
Change-Id: I753fb3d484fb32120eec6423bf865d5f4d1d2d4b