Add new QUERY_ADMIN_POLICY permission

This allows the holder to query device policies set by any admin.
Also granted the permission to shell.

Bug: 188410712
Bug: 205707885
Bug: 206107027
Test: N/A
Change-Id: I13d6801b045342939b45ef26350d18db652fe55d
3 files changed