DO NOT MERGE: Show notification for always-on app VPN

This is the same notification as the one shown during legacy lockdown
mode, sans the 'reset' button.

The notification is only shown during times when VPN has not yet
established or has failed, for example during boot or after a crash.

Bug: 29123115

(cherry picked from commit 1a405fe3)

(cherry picked from commit de7f7d19)

Change-Id: I42b4b24e25175bb7628b46a79431d2592644803c