Return best positions on match failure

[ghost]

Currently, when aries-key-guardian tries and fails to verify a fingerprint, it makes a secondary call to Bio Auth Service to get the positions of the best available fingerprints for the provided did. On such a verification failure, Bio Auth Service should instead simply respond with the positions instead of requiring a second call.