Remove implicit process capability for certain foreground service state.

Make the while-in-use camera/microphone access more restrictive. But
keep the implicit process capability for instrumented tests.

Bug: 237766679
Test: atest cts/tests/app/src/android/app/cts/ActivityManagerProcessStateTest.java#testFgsDefaultCapabilityNone
atest com.google.android.chre.pts.PtsChreTestRunner#messagePermissionTest
atest CtsAppSecurityHostTestCases:android.appsecurity.cts.EphemeralTest#testCameraPermission

Change-Id: Icae4146404bb2d5688df01d2d66e347383618fd7