Add a new permission for domain selection service

This change adds BIND_DOMAIN_SELECTION_SERVICE permission to be used by
a DomainSelectionService to ensure that only the system binds to it.
Adding this permission in CTS tests as well.

Bug: 258112541
Test: atest CtsPermissionPolicyTestCases
Change-Id: I91be5ac7a313600ec4a5820f15bae8402f1e4a9a