Face ID isn't a liveness check: behavioral signals as companion

Face ID matches a template; it doesn't verify the face is conscious or driving the session. How BehaviorGuard composes with biometrics, not against them.