Enforce the calling identity

As other pm commands, we should have the corresponding calling
identity check to avoid side channel information disclosure.

Bug: 250573325
Test: manually using the PoC in the buganizer to ensure the symptom
      no longer exists.
Test: PackageManagerServiceUnitTests:DomainVerificationEnforcerTest
Change-Id: Idd8045b8c00c51660d8d9b3f7b668b39d0e3e82f