Passkeys for users without CP access

[calebgdurham]

I have users who I don't want to grant CP access to. I'm using Craft's default login templates, so TOTP already works great for us, but some users have noticed the "Sign in with a passkey" button and have mentioned preferring passkey access if possible. For our purposes, like with the 2FA setup, I'd be happy to lean on Craft's default login templates for setting and storing those, but I'd love to continue not letting them access the CP at all to do that.