Adds PawletBinderService, an exported Service (no permission — open to
any caller) wrapping PawletManagerService, so third-party apps using
frameworks_pawlet's new pawlet-client-sdk can bindService() to it
instead of needing ServiceManager (hidden API, unreachable outside
privileged apps).
Also declares pawletos.permission.MANAGE_PAWLET_FEATURES
(signature-level) to keep the one mutating call
(PawletManagerService#setFeatureEnabled) privileged/in-tree-only.
static_libs pawlet-manager-service + pawlet-system straight into this
APK's dex to avoid system_ext shared-library wiring.
oxmc
dc5f2adab3