Add signature permission allowlist to cts shim.

This allows testing the allowlist feature via cts root.

Bug: 308573169
Bug: 309625722
Test: atest SignaturePermissionAllowlistTest
Ignore-AOSP-First: other required changes in this project are in
internal too

Change-Id: I0b0fb60bd1ac7b109cf4ad5fef73cce4a0dcf4c8
4 files changed