If there are system phishing actions, we clear all other (non-phishing) smart...

If there are system phishing actions, we clear all other (non-phishing) smart replies and actions (regardless whether they are app or system generated).

Also added a notification.action not null check before iterating it to suppress remote input actions. Searched the code base and there is a bunch of action not null checks in Notification.java which indicates it can be null.

Flag: EXEMPT bugfix
Test: atest SystemUITests
Bug: 407890979
Change-Id: I8152330cb43eaefa28faa7b8ed3ab8f6ba46d5b5