PackageManager: Restrict some camera intents to MATCH_SYSTEM_ONLY

These intents permit the handler to write camera / video images
directly to a supplied FD or Uri, and can be used to circumvent
EXIF redaction and may leak location info. Therefore, they are
restricted to pre-installed apps only, which can be CTS tested

Test: atest AvailableIntentsTest
Bug: 117223876
Change-Id: If0a77d0b8a6747da30803681cb1b813aee476b2b