Add a check for account access on all sync-related APIs.

Add a new check to verify that the calling uid has access to the
account in question on all sync-related APIs in ContentService.

This check is only enabled for apps targeting T+.

Bug: 201794303
Bug: 209005023
Bug: 199751623
Bug: 199751919
Bug: 200573021
Bug: 200956614
Bug: 200956588
Bug: 202160584
Bug: 201416182
Bug: 201415895
Bug: 202160705
Test: test each PoC
Change-Id: Iec4bfd2565871c9a7a3a608dca0280018b698398
(cherry picked from commit a59d844c)