Introduce the concept of the update owner (1/n)

To address the cross-store update without user consent, we introduce
the update ownership enforcement. Installers can opt in this enforce-
ment on initial installation. After that, the user intervenrion will
be required once the update isn't performed by the update owner (even
if this installer grants INSTALL_PACKAGES).

Bug: 244413073
Test: build
Test: atest FrameworksServicesTests:SystemAppUpdateTrackerTest
Test: atest FrameworksServicesTests:LocaleManagerServiceTest
Test: atest FrameworksServicesTests:PackageInstallerSessionTest
Test: atest FrameworksServicesTests:AppsFilterImplTest
Test: atest FrameworksMockingServicesTests:StagingManagerTest
Test: atest CtsPackageInstallTestCases:UpdateOwnershipEnforcementTest
Change-Id: Iddaba09c1f06fc157352379b33a188692c5249c4