Simulate Bitwarden SDK 3 deny_unknown_fields against projected FIDO2
JSON, hit AASA/related-origins over Rocket local HTTP, and provide a
live sqlite launcher that dual-mounts well-known at / and /vw with
the web vault disabled.
Bitwarden SDK 3 `Fido2Credential` deserializes with deny_unknown_fields.
Extra keys (prf, transports, backupEligible) echoed from stored cipher
data make iOS Autofill get_assertion fail as CTAP2 VendorError(240).
Project login.fido2Credentials onto CipherLoginFido2CredentialData,
emit null (not []) when credentials are missing, serve Autofill AASA
and /.well-known/webauthn, and default-on pm-30529-webauthn-related-origins.