Add new domain verification permissions

One for the domain verification agent package, one for the agent's
broadcast receiver, and one for Settings to mutate the user state.

Exempt-From-Owner-Approval: Already approved by owners on main branch

Bug: 163565712

Test: none, will be tested as part of implementation/enforcement

Change-Id: I680a495103ae1bc0c22695c38b3e9ad74ca47d8f