Expose ACCESS_INSTANT_APPS to the verifier

The package verifier needs to be able to see Instant Apps in order to do
its job. It already sees them on first install so no new information
about what Instant Apps are installed is leaked.

Test: builds
Change-Id: I5d892b2d7aa820a9c0c00ac357f20a3210cf3395