Unavailable

No prompt was ever shown, because BiometricAuthenticator.canAuthenticate would have said so. Carries the same BiometricAvailability a pre-flight check returns, so a caller that skipped the check still gets the actionable reason rather than a bare failure.