23/n: Move LockoutResetCallback tracking to its own class

Decouples shared code in BiometricServiceBase. The code that notifies
clients (keyguard) of lockout reset will eventually also send the
sensorId that lockout was reset for. However, that will depend on
subsequent changes.

Bug: 157790417

Test: adb shell killall -9 com.android.systemui, see callback removed
Test: Lockout fingerprint, wait 30s, keyguard is notified and starts
      authenticating again
Change-Id: I791ce6c146500f81638a56587e4e90d8f1933f5e