Make failed Touch ID cleanup retryable

Status: ready-for-human

After local Touch ID registration removal fails, the core asks the owner to retry cleanup. Settings offers only Enable/Disable, and when protection is already disabled and biometrics are unavailable both actions are unavailable. Successful runtime removal also has no success callback to clear the stale warning.

Acceptance: expose sanitized cleanup-failure state, provide an explicit retry using the existing disable/cleanup route even when biometrics are unavailable, and clear only the cleanup warning after a successful removal while preserving independent hardware availability reasons. Add fictional failure -> retry -> success state regressions and verify the frontend build. No password/key exposure or re-enrollment, no new IPC authority/dependency, no real biometric operation.

This follow-up depends on draft native activation PR #63. Keep its own PR draft while native physical acceptance remains open; source tests do not satisfy that gate.

Comments

Implementation and independent review are complete in draft PR #72, stacked on draft #63. Combined native source at 177e56d passed all 618 Mac tests and the complete check command. Physical native acceptance remains open; no real Vault or biometric operation was used.