Register a passkey

Enroll one passkey per device/origin (laptop, Vercel, phone). Requires the setup secret.