feat(auth): make passkey enrollment optional on first login

Remove passkey requirement from user onboarding flow
Update UI badges to show passkeys as optional rather than pending
Update documentation to reflect the new behavior

shared/auth.ts

@@ -93,13 +93,13 @@ export interface PasskeySummary {
 }
 
 export function needsUserOnboarding(
-  user: Pick<AuthUser, 'mustChangePassword' | 'needsPasskeySetup'> | null | undefined
+  user: Pick<AuthUser, 'mustChangePassword'> | null | undefined
 ) {
-  return Boolean(user && (user.mustChangePassword || user.needsPasskeySetup))
+  return Boolean(user?.mustChangePassword)
 }
 
 export function getDefaultAuthenticatedPath(
-  user: Pick<AuthUser, 'role' | 'mustChangePassword' | 'needsPasskeySetup'>
+  user: Pick<AuthUser, 'role' | 'mustChangePassword'>
 ) {
   if (needsUserOnboarding(user)) {
     return '/security'