Digital rights groups map out ‘minimum, necessary’ human rights protections to be included in UK government’s upcoming legal framework for police facial recognition