Actually use HardwareAuthToken to resetLockout where applicable

Lockout reset now happens at the source of truth, where the HAT is received
from Gatekeeper.

Fixes: 121198195

Test: Lockout is reset properly

Change-Id: Icd72a20494a65f0e48cff1258109d82fb58cdc98