Merge "Add READ_MEDIA_VISUAL_USER_SELECTED permission and appop" into tm-mainline-prod