Merge changes from topic "SoftHardStoragePerm" into qt-dev

* changes:
  Link to SoftRestrictedPermissionPolicy twin
  Pre-Q storage perm should behave hard restricted
  Factor out soft restricted permissions policy