feat: support android webauthn origins

[aeneasr]

This patch adds the ability to verify Android APK origins used during WebAuthn/Passkey exchange.

Upgrades go-webauthn and includes fixes for Go 1.23.

Related issue(s)

Checklist

• I have read the contributing guidelines.
• I have referenced an issue containing the design document if my change
  introduces a new feature.
• I am following the
  contributing code guidelines.
• I have read the security policy.
• I confirm that this pull request does not address a security
  vulnerability. If this pull request addresses a security vulnerability, I
  confirm that I got the approval (please contact
  [email protected]) from the maintainers to push
  the changes.
• I have added tests that prove my fix is effective or that my feature
  works.
• I have added or changed the documentation.

Further Comments

[codecov]

Codecov Report

Attention: Patch coverage is 72.72727% with 12 lines in your changes missing coverage. Please review.

Project coverage is 78.53%. Comparing base (e6d2d4d) to head (e785cfa).
Report is 2 commits behind head on master.

Files with missing lines	Patch %	Lines
identity/credentials_webauthn.go	80.00%	6 Missing and 1 partial ⚠️
schema/handler.go	0.00%	5 Missing ⚠️

Additional details and impacted files

@@           Coverage Diff           @@
##           master    #4155   +/-   ##
=======================================
  Coverage   78.52%   78.53%           
=======================================
  Files         380      380           
  Lines       27231    27266   +35     
=======================================
+ Hits        21383    21413   +30     
- Misses       4224     4231    +7     
+ Partials     1624     1622    -2     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.