Add logic for when to start the Udfps fp service

In general, the udfps overlay is shown whenever the fingerprint service
is running and there's a udfps fingerprint enrolled. However, unlike the
regular fingerprint, we don't want to start udfps fp service when:
- the bouncer is showing (ie: input pin/password/pattern)
- keyguard is showing the notification shade while locked
- on reboot, strong auth is required and udfps cannot be used to
authenticate

Test: manually checked:
 - udfps enrolled => pull down notification shade on LS => udfps overlay
 hidden
 - udfps enrolled => swipe up for bouncher => udfps overlay hidden
 - go to settings to enroll a new udfps fp => see overlay
Test: atest KeyguardUpdateMonitorTest AuthControllerTest KeyguardBouncerTest
Test: atest SystemUITests
Bug: 172050991
Change-Id: Id7e1b533d5b087dca24ac29a3323f2419d050da4