make FaceId 32-bit

int16_t is too conservative, because FaceId cannot be reused
Face

incomplete unit test: Face::Enroll cannot be tested until FaceMgr is ready