Merge "Give Shell the NOTIFY_PENDING_SYSTEM_UPDATE permission" into sc-dev