feat: support android webauthn origins

[aeneasr]

This patch adds the ability to verify Android APK origins used during WebAuthn/Passkey exchange.

Upgrades go-webauthn and includes fixes for Go 1.23.

Related issue(s)

Checklist

• I have read the contributing guidelines.
• I have referenced an issue containing the design document if my change
  introduces a new feature.
• I am following the
  contributing code guidelines.
• I have read the security policy.
• I confirm that this pull request does not address a security
  vulnerability. If this pull request addresses a security vulnerability, I
  confirm that I got the approval (please contact
  security@ory.sh) from the maintainers to push
  the changes.
• I have added tests that prove my fix is effective or that my feature
  works.
• I have added or changed the documentation.

Further Comments

[codecov]

Codecov Report

Attention: Patch coverage is 75.00000% with 12 lines in your changes missing coverage. Please review.

Project coverage is 78.54%. Comparing base (b51f780) to head (70ae813).
Report is 2 commits behind head on master.

Files with missing lines	Patch %	Lines
identity/credentials_webauthn.go	80.00%	6 Missing and 1 partial ⚠️
schema/handler.go	0.00%	5 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #4155      +/-   ##
==========================================
- Coverage   78.58%   78.54%   -0.05%     
==========================================
  Files         379      379              
  Lines       27030    27065      +35     
==========================================
+ Hits        21242    21258      +16     
- Misses       4177     4194      +17     
- Partials     1611     1613       +2     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.