Add CTS test for verifying runtime permission grant scope

Specifically: we now verify that when an app <uses-permission> a
single permission from within a group, and that request is granted,
the app does not also wind up with other permissions defined within
that group.

Bug 23525514

Change-Id: I73e53d5c8a9ba20441b3ceda9494da27015ef6fc
3 files changed