Restrict some FGS starts from BOOT_COMPLETED broadcast.

Don't allow foreground services of any type outside of location, health,
connected_device, remote_messaging, system_exempted, and special_use to
start from the BOOT_COMPLETED broadcast.

Bug: 296558535
Test: atest BootCompletedFgsTest
Change-Id: I8f4520746dccb381addb6df244705861cff1e5f8
3 files changed