GetBiometricEnrollmentsTool

Reports which biometric modalities are present/enrolled. No permissions declared by the module (the FingerprintManager.hasEnrolledFingerprints call is wrapped in try/catch and degrades to false if access is denied; FEATURE_FACE is a hardware-feature check, not enrollment state).

enrolled_count is the number of modalities flagged true (0–2: fingerprint + face), NOT a count of individually enrolled credentials.

Output map: enrolled_count (Int), has_fingerprint (Boolean), has_face (Boolean).