Give new permissions to Device Management Role Holder

To allow DMRH to enforce certain policies on dedicated devices,
give it the following permissions:
* MANAGE_DEVICE_POLICY_BLOCK_UNINSTALL
* MANAGE_DEVICE_POLICY_CAMERA_TOGGLE
* MANAGE_DEVICE_POLICY_MICROPHONE_TOGGLE
* MANAGE_DEVICE_POLICY_APPS_CONTROL

Also update permission CTS tests for the following new permissions
* MANAGE_DEVICE_POLICY_BLOCK_UNINSTALL
* MANAGE_DEVICE_POLICY_CAMERA_TOGGLE
* MANAGE_DEVICE_POLICY_MICROPHONE_TOGGLE

LOW_COVERAGE_REASON=XML change

Bug: 281964214
Test: android.permissionpolicy.cts
Change-Id: Icd32102d95f12217e3cf835440d0d3bb863dc49c