Drop VDM permissions from Shell

Instead, rely on the relevant role to get these permissions.

Replace FakeAssociationRule with VirtualDeviceRule

Fix: 370657093
Fix: 318641591
Test: presubmit
Test: atest VirtualDeviceManagerServiceTest
Test: atest AppOpsActiveWatcherTest AppOpsDeviceAwareServiceTest AppOpsStartedWatcherTest AppOpsNotedWatcherTest
Flag: EXEMPT test improvement

Change-Id: I65826943040c8650adbfd1ac002094e42bacd1ac