Introduce getEnforcingAdminsForKeyguardFeatures

Add RestrictedLockUtilsInternal::getEnforcingAdminsForKeyguardFeatures
which returns the EnforcingAdmin information that disables the given
keyguard flags. Add a special case handling to DevicePolicyManager to
cover the use-case of keyguard features policy properly.
Add EnforcingAdmin option to SupervisionRestrictionsHelper to create
supervision admin.
These changes will be used in biometrics settings in ag/35288530.

Flag: android.app.admin.flags.policy_transparency_refactor_enabled
Bug: 414733570
Test: atest SupervisionRestrictionsHelperTest
Test: atest FrameworksServicesTests_devicepolicy:com.android.server.devicepolicy.DevicePolicyManagerTest#getEnforcingAdminsForPolicy_keyguardDisabledFeatures_returnsManagedProfileAdminForParent

Change-Id: I42dec66f851d70b9ed101641ad67854eec8f3e02