Pass operationId to LSS, add HAT to KeyStore

Since we're now allowing auth-per-use credential keys, we need to
pass the operationId to SystemUI, which owns the call to verify
credential. Upon receiving a non-null HAT, it should be sent to
KeyStore.

Bug: 148425329

Test: atest com.android.systemui.biometrics
Test: atest com.android.server.biometrics

Change-Id: Iea737bf2dc0d81d87419df96d5cb43d51f10c6e3