Delay appop revocation when only capability is lost

On proc state changes, if the proc state doesn't change the uid state
over the restriction threshold and if no new capabilities are added then
delay the uid state commit. This fixes cases such as going from
UID_STATE_TOP -> UID_STATE_FOREGROUND, we shouldn't be revoking appop
access right away.

Test: AppOpsUidStateTrackerTest
Bug: 347891382
Bug: 290086710
Fixes: 382531813

Merged-In: Ia23c0f5b79fa194539151ffbd04a36891e06361b
Change-Id: Ia23c0f5b79fa194539151ffbd04a36891e06361b