Use the service lock for permission state.

Remove locks inside permission state classes, and make sure that code
using mState or calling getUidStateLocked() is under mLock.

grantRequestedRuntimePermissionsForUser() and
setWhitelistedRestrictedPermissionsForUsers() were never called under
the package manager lock, so it's also fine to go through each
permission without holding mLock over the entire loop.

Bug: 158736025
Test: presubmit
Change-Id: I19d7daf76ccdc69bb1494f1b1b45a7e8a05befeb