Allow special-access on secondary volumes

* Allow DownloadsProvider and ExternalStorageProvider special access to
priv-app directories on secondary volumes.
* Allows installer apps to access Android/obb on secondary
volumes. On primary volume installer apps go through lower fs and have
special Installer view: Zygote.MOUNT_EXTERNAL_INSTALLER
* This change does not give MTP apps special-access on secondary
volumes. See b/174347304.

Bug: 170304298
Bug: 171905898
Bug: 161967606
Bug: 161964072
Bug: 148841336
Test: Download files to secondary volumes do not show error
notifications
Test: Open Android/data for secondary volume on DocumentsUI (from Settings)
does not show empty (this behavior for secondary volumes is now in-line
with the behavior for primary volume)
Test: atest android.scopedstorage.cts.host.PublicVolumeHostTest#testCheckInstallerAppAccessToObbDirs
test: atest android.scopedstorage.cts.host.PublicVolumeHostTest#testCantAccessOtherAppsExternalDirs
Test: atest CtsScopedStorageHostTest
Test: atest CtsScopedStoragePublicVolumeHostTest
Test: atest DownloadProviderTest

Change-Id: I3e617a804bdd47b7904118f4af191d14815a2fc5
8 files changed