Returns the WebAuthn PublicKeyCredentialCreationOptions that the browser passes to navigator.credentials.create(), plus the application's allowedOrigins and relyingPartyId. Requires 'passkey' to be present in the application's allowedScaMethods. A subject may hold up to five passkeys; a sixth registration is rejected with 100004.