AWS Console Login

After first enrollment, passkey is the primary login. Google is only used once to create or recover passkeys.

Scaffold ready. WebAuthn flow not implemented yet.