Correct vulnerability when setting pending intents on import/export notifications by setting FLAG_IMMUTABLE am: 1d595f80e9 am: 835bc188db am: 2aedd25d2e am: b19ebd07e3 am: f24d838e03 am: 10a03e71dd am: f8fc2fdab4 am: fb9cc15e12

Original change: https://googleplex-android-review.googlesource.com/c/platform/packages/apps/Contacts/+/12272170

Change-Id: I8612f3a3487dec5acfc63d5c1020d155bc5cf740