Update active fingerprint group when switching profiles

Active group needs to be updated as soon as the user switches
to a work profile app. This is to ensure that the authenticator Id
returned by FingerprintService is always up-to-date, which is
accessed by KeyStore to provision authentication-bound keys.

Bug: 33459191
Test: manual
Change-Id: I3641cd61400771df23f1174e1057ba388d6f8efb