Authenticator management

Task API family Notes
Credential management fido_credman_* Enumerate or delete discoverable credentials; requires supported options / authorization.
Biometric enrollment fido_bio_dev_* Discover enrollment support, begin or remove templates.
Large blobs fido_dev_largeblob_* Read, write, or remove authenticator-stored blobs.
PIN changes fido_dev_set_pin() Sets or changes the device PIN.
Reset fido_dev_reset() Destructive; removes authenticator state.

Reset and credential deletion are destructive. Query feature support rather than inferring it from the CTAP version.