Implement sandbox hooks to forward OPM related GDI system calls.
This patch adds hooks to the Windows sandbox to forward Output Protection
Manager system calls to the browser process when running under Win32k
lockdown. This allows a locked down process to enable output protection when
playing back media.

Design Doc: https://docs.google.com/document/d/1cn8lpZiu0DQLovkbJSMmRlPyM0ETtjdsgvOOfR6jwJM/edit?usp=sharing

BUG=523278
CQ_INCLUDE_TRYBOTS=tryserver.chromium.win:win10_chromium_x64_rel_ng

Review URL: https://codereview.chromium.org/1856993003

Cr-Commit-Position: refs/heads/master@{#390051}
19 files changed