Filter package manager calls

These are some of the nuanced package manager calls. These aren't
outright allowed or denied. Instead, their return value depends upon
who's calling it [eg an instant app or a full app] and the type of
application the method operates on.

Bug: 35871369
Test: cts-tradefed run commandAndExit cts-dev -m CtsAppSecurityHostTestCases -t android.appsecurity.cts.EphemeralTest
Test: Manual; install instant app and ensure it runs
Change-Id: I88b37e2c7928d5b0a7428cef53112dc193053266