Permission protect receipt of QUERY_PACKAGE_RESTART

This change adds a signature permission to the system manifest intended
to guard receipt of the QUERY_PACKAGE_RESTART ordered broadcast so that
arbitrary apps cannot receive or inject bad data into the response.

Bug: 230755401
Test: manual - settings force stop works
Change-Id: Idffc0c1af702da9cb06747c800266efc48592b02