feat: support android webauthn origins

[aeneasr]

This patch adds the ability to verify Android APK origins used during WebAuthn/Passkey exchange.

Upgrades go-webauthn and includes fixes for Go 1.23.

Related issue(s)

Checklist

• I have read the contributing guidelines.
• I have referenced an issue containing the design document if my change
  introduces a new feature.
• I am following the
  contributing code guidelines.
• I have read the security policy.
• I confirm that this pull request does not address a security
  vulnerability. If this pull request addresses a security vulnerability, I
  confirm that I got the approval (please contact
  [email protected]) from the maintainers to push
  the changes.
• I have added tests that prove my fix is effective or that my feature
  works.
• I have added or changed the documentation.

Further Comments

[codecov]

Codecov Report

Attention: Patch coverage is 75.00000% with 12 lines in your changes missing coverage. Please review.

Project coverage is 78.56%. Comparing base (f9640ff) to head (cfc6cd6).
Report is 3 commits behind head on master.

Files with missing lines	Patch %	Lines
identity/credentials_webauthn.go	80.00%	6 Missing and 1 partial ⚠️
schema/handler.go	0.00%	5 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #4155      +/-   ##
==========================================
- Coverage   78.56%   78.56%   -0.01%     
==========================================
  Files         379      379              
  Lines       27032    27065      +33     
==========================================
+ Hits        21239    21263      +24     
- Misses       4181     4190       +9     
  Partials     1612     1612              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.