Passkeys

WebAuthn foundation is in place

Registration and authentication route handlers are scaffolded. The next step is to connect them to real user onboarding and challenge persistence.