WebAuthn ceremony mock

Challenge → authenticator assertion → signature verify, with real P-256 signatures and editable inputs so you can break each check.