Add more nuanced errors for remote key provisioning

These errors all indicate that a key attestion could not be generated
because no remotely provisioned keys are available. Clients may choose
to look at this error information to decide if and how to retry the
operation.

Also rename OUT_OF_KEYS_REQUIRES_UPGRADE to
OUT_OF_KEYS_REQUIRES_SECURITY_PATCH. This better indicates that the
system is potentially vulnerable (rather than simply running old code).

Test: keystore2_test
Change-Id: Iec0e9f20863e5ffee8c86bf67b9ad94f87b4940e
4 files changed