Merge changes from topic "SUBSCRIBE_TO_KEYGUARD_LOCKED_STATE-privileged-flag" into main

* changes:
  Update privapp-permissions for shell and systemui
  Add privileged flag to SUBSCRIBE_TO_KEYGUARD_LOCKED_STATE