Only BIOMETRIC_STRONG HATs should be sent to KeyStore

Bug: 150014844
Bug: 141025588
Bug: 151967372

Test: Configure a device to have weak biometrics only, then
      run CtsVerifier Weak Biometrics section
Test: com.android.server.biometrics

Change-Id: I866e84b2f88c24faeaf42452d44f651ec220858a