Fixed ScopedAccessProvider.getPackagesCursor().

It was returning packages with any granted URI permission, not just to
scoped access directories.

Bug: 72055774
Fixes: 110867799

Test: atest CtsAppSecurityHostTestCases:ScopedDirectoryAccessTest#testResetDoNotAskAgain,testResetGranted
Test: manual verification

Change-Id: Id72fb591fcef47c2140fdbf5303976818cfb5237