Check sound Uri permission when creating a notification channel

 Verify that the calling app has the right permissions to read/grant the sound Uri
 for a channel it creates. Fallback to default notification sound if permission check fails.
 Previously, Uri permissions would only be checked by NotificationRecord when a notification was posted.

Flag: EXEMPT security fix

Test: atest PreferencesHelperTest
Test: atest NotificationManagerServiceTest
Bug: 337775777

(cherry picked from commit f9cbae0ba1125e102e66ce041d7d3b4d87f47a9b)
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:fb1f2c00189ba7f4f9a303fdadadcec874b3c6ba)
Merged-In: I7977a8b6eea4b75873787e0ab75de7b4e788f2df
Change-Id: I7977a8b6eea4b75873787e0ab75de7b4e788f2df