============================================================================
FIDO2 Credential Manager
Instance methods
Derive auth value from credential_id using KDF
SourceGet or create FIDO2 credential
SourceSign with ECDSA, tracking r values to detect nonce reuse
Source