Remove AutomaticZenRule.canUpdate()

Instead, store the user-modified bitmasks directly in the ZenRule, since only ZenModeHelper needs to access them. Updated tests to match. This also re-hides a bunch of TestApis since CTS will no longer verify this.

Also validate that the origins supplied to ZenModeHelper make sense (for the "API" methods, called from NMS, only user/systemui/app is expected).

Test: atest ZenModeHelperTest ZenModeConfigTest
Fixes: 320271785
Fixes: 318506692
Change-Id: Ied6351aa0a4b473145876e80589e5ad16db18553