Redact OTP messages from SMS broadcast

Before sending the RECEIVE_SMS broadcast, check if the SMS contains an
OTP. If it does, only send it to apps with
RECEIVE_SENSITIVE_NOTIFICATIONS permission

Bug: 351976749
Test: atest SmsTest SmsManagerTest SmsDispatchersControllerTest
Flag: com.android.internal.telephony.flags.redact_otp_sms

Change-Id: Ied8c17d7336abe3255532da39c2ee326aa833452