Concerns about the Indian government’s new contact-tracing software stretch back more than a decade, to its controversial biometric data scheme