Unlock the work profile for remote input

This change addresses the following scenario:
* The device has a managed profile.
* The managed profile has a separate challenge from the primary profile
  (i.e. not a unified challenge).
* The user gets a notification from the managed profile.
* The notification offers the ability to reply from the lockscreen (e.g.
reply to a chat message from the managed profile).

In that case, the user should be required to unlock both the primary
lockscreen and the managed profile lockscreen, before they can use the
inline reply feature. But prior to this change, the user is only
asked to unlock the primary lockscreen and then can not proceed.

Change the code that handles this scenario to differentiate between
unlocking the primary user and unlocking the managed profile by
evaluating whether the parent user of the managed profile is locked or
not. If the work profile is locked but the primary user is not,
then the callback to unlock the work profile is called.

Testng steps:
* Set up a device with a work profile.
* Set a separate challenge to the work profile.
* Send a Chat or Hangouts message to the account in the work profile.
* From the lockscreen, or notification shade, expand the notification
  and tap reply.
* Observe the user has to unlock twice and gets to enter the reply.

Test: Manual (See above)
Bug: 149218396
Change-Id: Iea13d08b9fc2d541b78c03d7e695461eb57496b9