more Newapi compliance

Annotate more code for S+ so that the mainline newapi linter knows the
code doesn't run on Q/R (and thus won't invoke apis from the later releases).
Generated a lint-baseline.xml for the service directory.

Bug: 188851874
Test: build; m lint-check
Change-Id: I1dc88b8c98cfdff135c3912e1f95dfe9ea0c9384