Use ProviderException in AndroidKeyStore.

This switches to ProviderException in most places in AndroidKeyStore
primitives where checked exceptions cannot be thrown. This is to
follow JCA design.

KeyStoreKeyGeneratorSpi is not touched by this CL because there's
another CL already doing that.

Bug: 18088752
Change-Id: If7e93042f973334b9bba004f5a330f831c1e77c1