Create KeyguardFaceAuthManager to provide API for running face auth & face detection from Keyguard

Scenarios to handle while running face auth:
 1. If a previous face auth request is being cancelled and new request arrives, we should run face auth after the cancellation error is received
 2. Ignore requests to run face auth if it is already running
 3. After triggering face auth, if face cancellation error is never received from faceManager for 3s, assume cancellation was successful.

Bug: 262838215
Test: atest KeyguardFaceAuthManagerTest
Change-Id: I495432d05e828c8e9d28c6b5ea12858c531f8e22