fix: authorize timedate setters via security-loader - #1300

fix: authorize timedate setters via security-loader

1. SetTime and SetNTP received the sender parameter but never used it, so any local user could change the system clock or toggle network time synchronization without authentication, bypassing the polkit check of systemd-timedated.
2. Timedate1 now authorizes callers through the security-loader caller registry first (securityloader.TimedateScope) and falls back to Polkit only for unregistered callers, the same pattern airplane mode and the touchpad already use. The caller-supplied polkit.message detail is kept on the fallback path, so the authentication dialog still shows the translated message.
3. New SetAllowCaller method, restricted by misc/conf/org.deepin.dde.Timedate1.conf to root and the deepin-daemon group. Timedate1 is also added to the handshake destination list of dde-session-daemon: the session module forwards SetDate/SetNTP to the system module, so that connection has to be registered as well, otherwise those two still prompt. 7 files, +75/-35. Reported as the timedate1 items of USRC CWE-306 and bughunter CWE-862.

Log: Changing the clock or the NTP switch from the control center no longer shows an authentication dialog; unregistered local callers are still denied.

Influence:

1. Control center: toggle automatic time synchronization and change date/time, expect no authentication dialog and an applied change.
2. Ordinary user calling SetTime with dbus-send: expect an authorization error and an unchanged timedatectl state.
3. Ordinary user calling SetAllowCaller: expect AccessDenied from the D-Bus policy; the same call from a security-loader started control center succeeds.

fix: timedate 设置接口接入安全启动鉴权

1. SetTime 与 SetNTP 接收了 sender 却从未使用，调用 systemd-timedated 前没有任何鉴权，任意本地用户可直接修改系统时间或开关网络对时，绕过 systemd-timedated 的 polkit 校验。
2. Timedate1 现在先查 security-loader 调用者注册表（securityloader.TimedateScope），未注册的调用者才走 Polkit，与飞行模式、触摸板已有写法一致；Polkit 兜底路径保留调用方传入的 polkit.message，认证框仍显示已翻译的提示。
3. 新增 SetAllowCaller 接口，misc/conf/org.deepin.dde.Timedate1.conf 限制只有 root 与 deepin-daemon 组可调用。同时把 Timedate1 加入 dde-session-daemon 的 handshake 目的列表：会话模块的 SetDate/SetNTP 由系统模块执行，不注册该连接这两个操作仍会弹认证框。7 个文件，+75/-35。对应报告 USRC CWE-306 与 bughunter CWE-862 中的 timedate1 项。

Log: 控制中心修改时间或切换网络对时不再弹出认证框；未注册的本地调用者仍被拒绝。

Influence:

1. 控制中心切换自动同步时间、修改日期时间：不弹认证框且改动生效。
2. 普通用户用 dbus-send 调用 SetTime：返回授权错误，timedatectl 状态不变。
3. 普通用户调用 SetAllowCaller：D-Bus 策略返回 AccessDenied；由 security-loader 启动的控制中心调用成功。

Fixes: DDE-610
PMS: BUG-379743

Summary by Sourcery

Authorize timedate changes through security-loader with Polkit fallback for unregistered callers.

New Features:

• Add timedate caller registration through security-loader and expose the SetAllowCaller D-Bus method.

Bug Fixes:

• Authorize SetTime and SetNTP callers before allowing system clock changes or network time synchronization changes.
• Preserve translated Polkit messages for callers that are not registered with security-loader.

Enhancements:

• Register Timedate1 in the session daemon handshake so trusted session-module requests receive consistent authorization.