Enforce that a PendingIntent has an explicit mutability

flag on creation.

This was previously a log.e, this change enforces this requirement.
See go/immutable-pendingintents for more context.

Bug: 160794467
Test: atest PendingIntentTest
Change-Id: If49be614125d7ac7eb556559ff32016f41beaef8