[ash] Use SharedImageFormat in arc ProtectedBufferAllocator

Update ProtectedBufferAllocator and ProtectedBufferManager to use
SharedImageFormat instead of BufferFormat as part of effort to move
away from BufferFormat. Also convert its callsite to pass in
SharedImageFormat.

Bug: 356649879
Change-Id: I98cb467514b7b3495af9b937c8f01d1ff23ae9eb
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6916674
Commit-Queue: Saifuddin Hitawala <hitawala@chromium.org>
Reviewed-by: Andres Calderon Jaramillo <andrescj@chromium.org>
Cr-Commit-Position: refs/heads/main@{#1511924}