Move Car Service to its own security domain

Before this change Car Service was running in system_app domain which
didn't allow us to have fine grain access control. For example, we had
to grant VHAL client access to all system apps, etc.

Also, make KitchenSink to run in the same security domain as Car Service
(it has direct access to VHAL for test / debug purpose)

Bug: 70637118
Test: m && emulator ; also verified on bat_land
Change-Id: I8d27ae280ef6badf3a10b71a6efa47e92987f255
9 files changed