A passkey turns your smartphone into a full-fledged FIDO2 credential, but almost everyone ignores it.