When I create a passkey for GitHub or Google, that cryptographic credential lives ... or about ecosystem lock-in or sync ...