Add grant() and revoke() for Role.

This change adds Role.grant()/revoke(), which extracted the logic from
RoleControllerServiceImpl, and added optionally killing apps if any
permission or app op changed.

Bug: 110557011
Test: build
Change-Id: Ia80905e89d9b3aa51c9a3e737dc8f526b9490848