Add `ALLOWLISTED_WRITE_DEVICE_CONFIG` permission.

Also grant this permission to the shell. Eventually, we'll revoke
`WRITE_DEVICE_CONFIG` from the shell.

Bug: 251818659
Test: m
Change-Id: I4dfb66b3b78eefa29ade9ea579180466b9be1b25
6 files changed