Passkey capability probe

Checks whether this laptop can create a device-bound passkey — one that cannot sync to a phone or another machine. Nothing is saved, and no account is created.