Update DOMAIN_VERIFICATION_AGENT to internal|privileged

This change means a system image update is required to change the
grant for this permission. A role cannot be used as the intended
consumer declares a library in its manifest.

Bug: 177080830

Test: manual, verified using com.android.statementservice

Change-Id: I70549c0bceefa111bddf72d785bb58a7320a4220