use privapp_allowlist property

Test: m com.android.permission com.google.android.permission and verify
  manually that apex_payload.img contains correct privapp_allowlist
Bug: 242509786
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:b5e01c5acd286a7c20ec419424fd4051c524a7f7)
Merged-In: I9096cf02e4d0f74f62f4a2d11a34cafd51770ad0
Change-Id: I9096cf02e4d0f74f62f4a2d11a34cafd51770ad0