Move permissions-related DPM CTS test into presubmit.

This way they will actually prevent breakages.
All these tests are already running in presubmit for services/devicepolicy
and are not flaky unless annotated as such. I changed FlakyTest annotation
to the one that is used for host-side flaky tests (all those tests are
host-side).

Also rather than enumerating every tests, use a new annotation. This way
there is less duplication - if we rename a test, it won't require
TEST_MAPPING change. Also it makes it easier to add tests to presubmit if
we discover that a test became broken because of some permission-related
change.

Bug: 135979609
Test: atest
Change-Id: I0c78c7812971737a867bc5eb36182a4e9e39eb9c