Add ECM restrictions on Default apps.

If the app is restricted by EnhancedConfirmationManager#isRestricted, it
will be unselectable by the user and greyed out on the list.

Bug: 310218979
Test: atest CtsRoleTestCases
Test: presubmit
LOW_COVERAGE_REASON=324297112,324298180

Change-Id: Iaea5b1aa85981ca339b7f2af4f552525ab99b37b