Create enrollment session

Issue a one-use Grantex passkey enrollment link bound to the developer and principal for ten minutes. Requires the passkey enrollment rollout flag.

Call only from your server after authenticating the principal. Do not log or share the returned bearer link. See FIDO2 / WebAuthn.