Setup checks

Stable IDs shared by ./gradlew passkiCheck, the on-device PasskeyDoctor and this dashboard (catalog v1).

IDPlatformSeverityCheck
AND-01androiderrorassetlinks.json reachable
AND-02androiderrorLogin credentials delegated to the app
AND-03androiderrorSigning certificate listed
AND-04androidwarningGoogle Digital Asset Links agrees
AND-05androidwarningPlay App Signing key listed
AND-06androiderrorPassKi initialised in the app
IOS-01ioserrorapple-app-site-association reachable
IOS-02ioserrorApp listed under webcredentials
IOS-03ioswarningApple CDN has the app
IOS-04ioserrorEntitlements list webcredentials
IOS-05ioserrorEntitlements wired into the Xcode build
IOS-06ioserrorBuilt app carries the entitlement
SRV-01servererrorServer RP ID matches
SRV-02servererrorServer allows all origins
SRV-03servererrorServer options are valid WebAuthn
CFG-01configerrorRP ID is a bare domain
DEV-01devicewarningAndroid device can store passkeys
DEV-02devicewarningiOS device can use passkeys
DEV-03deviceerrorPlatform supports passkeys