unable to create custom firewall rules to allow download of android updates from google

### Please answer the following questions for yourself before submitting an issue

- [X] Filters were updated before reproducing an issue
- [X] I checked the [knowledge base](https://adguard.com/kb/) and found no answer
- [X] I checked to make sure that this issue has not already been filed

### AdGuard version

4.3.1 + 4.4

### Environment

- OS version: 14
- Device: Google Pixel 8 (factory default ROM)

### HTTPS filtering

- [ ] yes, I do

### Root access

- [ ] yes, I have it

### Integration with AdGuard VPN

- [X] yes, I do

### Routing mode

Local VPN

### Ad Blocking

AdGuard Base filter, AdGuard Mobile Ads filter, EasyList

### Privacy

AdGuard Tracking Protection filter, EasyPrivacy

### Social

AdGuard Social Media filter

### Annoyances

AdGuard Popups filter, AdGuard Mobile App Banners filter

### Security

Online Malicious URL Blocklist

### Language-specific

AdGuard Japanese filter, EasyList Germany

### Other

_No response_

### Which DNS server do you use?

Automatic DNS

### DNS protocol

None

### Custom DNS

_No response_

### What Stealth Mode options do you have enabled?

_No response_

### Issue Details

Steps to reproduce:
1. enable adguard (DNS+Firewall) .
2. enable global firewall rules in adguard. disallow all wifi + mobile data connections globally.
3. go to android settings and try to download available android security updates provided by google. This results in the error message "network error. try again later" seen in the german screenshot below
4. check adguard firewall quick actions -> no quick action available, to unlock the android updates
5. check "recent activity" in adguard "statistics" tab-> note the blocked tcp connection from "root" in the second screenshot below. However, there is no app called "root" installed on my phone, so I can not allow this connection/app...
6. enable "custom firewall rule". Allow all wifi+mobile data for all "Download manager" and "system" apps. Repeat step 3 -> Download still does not work
7. disable adguard and repeat step 3 -> android update download works as expected

### Expected Behavior

There should be a way to build custom firewall rules for android updates, when global firewall rules do not allow internet access by default.

### Actual Behavior

android update downloads always fails, when global firewall rules do not allow internet access by default

### Screenshots

Android Update error (german)


I suspect this is the blocked update download


### Additional Information

_No response_