DO NOT MERGE: Assert that PM requires APK to start with ZIP LFH

This adds a CTS test which asserts that Package Manager rejects APKs
which do not start with ZIP Local File Header magic.

Test: make cts && \
      cts-tradefed run singleCommand cts \
        -c com.android.cts.appsecurity.PkgInstallSignatureVerificationTest
Bug: 64211847
Merged-In: I3a8b5c4c9c2ba259ce90f1e9fc0191caf8788b80

Change-Id: Ifddcc0655f9ab4bb562aef094259d494dee35d8c
(cherry picked from commit ad4f08ba)