Pipe the user restriction to the admin dialog

This change allows us to show different strings for different user
restriction.

Instead of setting DevicePolicyManager.EXTRA_RESTRICTION everywhere
in Settings, EnforcedAdmin object now stores the restriction. So when
we are starting the admin dialog with the EnforcedAdmin object,
we can set the EXTRA_RESTRICTION bit.

Test: make  RunSettingsLibRoboTests
Bug: 78443458

Change-Id: Iabc1629b9ed18f881cdc8c15ec5e49a4b50f76a4