Check sound Uri permission when creating a notification channel

 Verify that the calling app has the right permissions to read/grant the sound Uri
 for a channel it creates. Fallback to default notification sound if permission check fails.
 Previously, Uri permissions would only be checked by NotificationRecord when a notification was posted.

Flag: EXEMPT security fix

Test: atest PreferencesHelperTest
Test: atest NotificationManagerServiceTest
Bug: 337775777
Cherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:2660997099937521ce6fee92b012efd0e182d20e
Merged-In: I1fcd2b4bbe9aad146775af8963957307afb995c1
Change-Id: I1fcd2b4bbe9aad146775af8963957307afb995c1