Support for @repo//... targets in acls logic

ACL logic does not support external packages which forces bazel users to either default everything to true/false. This is especially broken for `aar_import` rules which are most likely used through maven as external repos.

See https://github.com/bazelbuild/rules_android/blob/e36435698792adc1a4a1c789c8fd1f8818926ea1/rules/acls.bzl#L293