fix: provide domain in session, passkey and u2f (#6097)

This fix provides a possibility to pass a domain on the session, which
will be used (as rpID) to create a passkey / u2f assertion and
attestation. This is useful in cases where the login UI is served under
a different domain / origin than the ZITADEL API.

internal/domain/human_web_auth_n.go

@@ -23,6 +23,7 @@ type WebAuthNToken struct {
 	AAGUID                 []byte
 	SignCount              uint32
 	WebAuthNTokenName      string
+	RPID                   string
 }
 
 type WebAuthNLogin struct {
@@ -32,6 +33,7 @@ type WebAuthNLogin struct {
 	Challenge               string
 	AllowedCredentialIDs    [][]byte
 	UserVerification        UserVerificationRequirement
+	RPID                    string
 }
 
 type UserVerificationRequirement int32