Update ENSURE_VERIFY_APPS javadoc

Make it clear that now this restriction applies across the whole device,
and is settable by profile owner.

Bug: 31000521
Test: None; just javadoc update
Change-Id: If82d8f4167cf1b77d6e10554f1d96b2d3a2a54a0