Add BIND_DEVICE_ADMIN permission to admin integrated flow screens.

This allows both activities to be started only from
ManagedProvisioning. Before this change, an arbitrary app could start
them.

Fixes: 129136880
Test: ran the provisioning flow to confirm both screens are shown
Test: ran adb shell am start -a for both GET_PROVISIONING_MODE and
ADMIN_POLICY_COMPLIANCE to confirm activities cannot be started by an arbitrary app
Change-Id: I9314a615ddd06b8ea5fe0dba2098fba0a0714874

Author: arangelov

app/src/main/AndroidManifest.xml

@@ -72,7 +72,8 @@
         <activity
                 android:name=".FinalizeActivity"
                 android:label="@string/app_name"
-                android:theme="@style/SuwThemeGlifV3.Light">
+                android:theme="@style/SuwThemeGlifV3.Light"
+                android:permission="android.permission.BIND_DEVICE_ADMIN">
             <intent-filter>
                 <action android:name="android.app.action.ADMIN_POLICY_COMPLIANCE" />
                 <category android:name="android.intent.category.DEFAULT"/>
@@ -97,7 +98,8 @@
         </activity>
 
         <activity android:name=".provision.DpcLoginActivity"
-                android:exported="true">
+                android:exported="true"
+                android:permission="android.permission.BIND_DEVICE_ADMIN">
             <intent-filter>
                 <action android:name="android.app.action.GET_PROVISIONING_MODE" />
                 <category android:name="android.intent.category.DEFAULT"/>