Correct vulnerability when setting pending intents on import/export notifications by setting FLAG_IMMUTABLE am: 1d595f80e9 am: 835bc188db am: 2aedd25d2e am: b19ebd07e3 am: f24d838e03 am: 10a03e71dd am: f8fc2fdab4 am: fb9cc15e12

Original change: https://googleplex-android-review.googlesource.com/c/platform/packages/apps/Contacts/+/12272170

Change-Id: Iee122c25f5cba39fc612c9934487d1f5cdd16ce3