Why not try create `context` with the package name in uri by `CreatePackageContext` and get assets from that context?
I think this is the reason why we introduce `app://`, to get resources from other apps within the permission control system.