Propagate revoked permissions in permission review mode

In permission review mode we represent install permissions for legacy
apps as constantly granted runtime ones since we need to keep per
user flags associated with a permission. We were not propagating
a revoked permission for a legacy app when the later is upgraded to
a modern app when permission review is enabled.

Test: CTS test passes and manual testing worked fine

Change-Id: I32b8ffee89cc034661f8eb5a172dbe2349ea4a18