More flexible API enforcement policy support.

This CL adds the ability to configure which banned API lists to enforce,
defined by new enum hiddenapi::ApiEnforcementPolicy. Currently, the policy
can be set at zygote fork time, but not at dex optimization time where
blacklist enforcement is still assumed. As such, making the policy more
strict will not work as expected yet. This will be improved in a follow up
CL.

(cherry-picked from commit 159f596e)

Test: art tests pass
Test: Device boots

BUG: 73337509
Change-Id: I0f2eab0895acabfaca39c82bdb98316976c73bea
Merged-In: I33f9afce628a86727e400052f4d5979d3536da8c