Don't run face auth (non-bypass) on a dismissible keyguard

However, run face detect if bypass is enabled on
a dismissible keyguard.

Test: atest DeviceEntryFaceAuthRepositoryTest
Test: fold the device to get to the unlocked keyugard;
observe that non-bypass face auth doesn't run
Fixes: 322106530
Flag: None

Change-Id: Ia67946dd9d81fbc0fb3aece2ea7cec92196d45a3