onBackground

App left the foreground: SOFT-lock after the grace period unless we come back. App-switching isn't the same threat as the device being secured, so backgrounding gates the UI + requires re-auth on return but KEEPS the SDK alive — so background monitoring (received-funds, sync) keeps running instead of dying the moment you switch apps. The HARD triggers (screen-off / idle / manual) still wipe the SDK.