Enforce NETWORK_BYPASS_PRIVATE_DNS

Change permission check from PERMISSION_SYSTEM to
NETWORK_BYPASS_PRIVATE_DNS or CONNECTIVITY_USE_RESTRICTED_NETWORKS.

Bug: b/78494660
Test: manual: captive portal login & MMS sending works
(cherry-picked from aosp I3f3b4d35eb1bd0a3c8f567055ba481dbb2ad3df7)
Merged-In: I32b6c91eeef55ce694f99018bc7ea4af352d28cc
Merged-In: Ice21316ff06261bf957d6eb720d49633eaf00486
Change-Id: Ib9bcf618bb674da6837408b3e7e5f885ffcda5c7