Control revoke-on-upgrade behavior for loc perm

By default: Revoke on upgrade, but can be disabled by setting the
location_permissions_upgrade_to_Q_mode to anything but 0.

Fixes: 127285709
Test: Upgraded from P to Q with and without
      location_permissions_upgrade_to_Q_mode set
      atest --test-mapping frameworks/base/core/java/android/provider:presubmit
Change-Id: I4dd1772e78f46c881a5f747fcf61583beec2d6a2

• api/system-current.txt[diff]
• core/java/android/provider/Settings.java[diff]
• core/proto/android/providers/settings/secure.proto[diff]
• core/tests/coretests/src/android/provider/SettingsBackupTest.java[diff]
• packages/SettingsProvider/src/com/android/providers/settings/SettingsProtoDumpUtil.java[diff]
• services/core/java/com/android/server/pm/PackageManagerService.java[diff]
• services/core/java/com/android/server/pm/permission/PermissionManagerService.java[diff]
• services/core/java/com/android/server/pm/permission/PermissionManagerServiceInternal.java[diff]