Report user activity, extending the unlock window

Sent by the client on genuine interaction, at most once a minute. Not inferred from traffic: the app polls in the background, so an abandoned device would otherwise never lock. Lock-gated, so an expired window can never be revived by one of these.