Make SOFT_RESTRICTED reflect actual restriction state

So that we can compute the app op mode based on it.

This does result in a minor behavior change that when a non-exempt app
requests a soft restricted permission and is actually exempt (may get
the permission granted), we no longer report the APPLY_RESTRICTION
permission flag. However nobody should be relying on that, and this
change makes the flag much more useful anyway.

Also removed a unit test that tests against an invalid pre-condition
that is no longer automatically fixed, which should be okay since it
shouldn't happen anyway, and we are still reconciling such states
elsewhere e.g. on boot.

Bug: 266164193
Test: presubmit
Change-Id: I54042831ea4ab6077caba6e8b2cf57d1f91168ca