aa_log_extract_tokens: Fix audit type to be ALLOWED rather than PERMIT

The actual type for "should-be-denied-but-in-complain-mode-so-go-ahead" audit messages is ALLOWED, not PERMIT.

See https://github.com/torvalds/linux/blob/v4.19/security/apparmor/audit.c#L32