Make screen capture per-device DO and COPE

Test cases:
- DO
  - Verify disabled for entire device
  - Verify still disabled after restart
  - Verify no longer disabled when DO is removed
- COPE
  - parent
     - Verify disabled for entire device
     - Verify still disabled after restart
     - Verify no longer disabled when COPE PO is removed
  - not-parent
     - Verify disabled for user
     - Verify disabled after restart
     - Verify disabled when PO is removed

Bug: 217558483
Test: DevicePolicyManagerTest
      OrgOwnedProfileOwnerTest#testScreenCaptureDisabled
      ScreenCaptureDisabledTest
Change-Id: I977eb18619da46e1cfc5d0a8d351ea80d3ea7205