Use signature-based trust for package name overrides

Shift the trust model for EXTRA_PACKAGE_NAME overrides from installation status (FLAG_SYSTEM) to cryptographic signatures. Only packages signed with core system certificates are now
permitted to override the calling package name.

Bug: 424853397
Bug: 397217317
Flag: EXEMPT Bugfix
Test: manual
Cherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:08582e104a16b18f578a69ee9bca418226ba8360
Merged-In: I0c337720e42f6492573d261ae66fa88c511cd99e
Change-Id: I0c337720e42f6492573d261ae66fa88c511cd99e
1 file changed