feat: implement register Passkey user API v2 (#5873)

* command/crypto: DRY the code

- reuse the the algorithm switch to create a secret generator
- add a verifyCryptoCode function

* command: crypto code tests

* migrate webauthn package

* finish integration tests with webauthn mock client

internal/webauthn/client.go

@@ -0,0 +1,36 @@
+package webauthn
+
+import (
+	"fmt"
+
+	"github.com/descope/virtualwebauthn"
+)
+
+type Client struct {
+	rp         virtualwebauthn.RelyingParty
+	auth       virtualwebauthn.Authenticator
+	credential virtualwebauthn.Credential
+}
+
+func NewClient(name, domain, origin string) *Client {
+	rp := virtualwebauthn.RelyingParty{
+		Name:   name,
+		ID:     domain,
+		Origin: origin,
+	}
+	return &Client{
+		rp:         rp,
+		auth:       virtualwebauthn.NewAuthenticator(),
+		credential: virtualwebauthn.NewCredential(virtualwebauthn.KeyTypeEC2),
+	}
+}
+
+func (c *Client) CreateAttestationResponse(options []byte) ([]byte, error) {
+	parsedAttestationOptions, err := virtualwebauthn.ParseAttestationOptions(string(options))
+	if err != nil {
+		return nil, fmt.Errorf("webauthn.Client.CreateAttestationResponse: %w", err)
+	}
+	return []byte(virtualwebauthn.CreateAttestationResponse(
+		c.rp, c.auth, c.credential, *parsedAttestationOptions,
+	)), nil
+}