1 · Make a passkey
The page makes the passkey on this host and shows what Turnkey takes for it. Hand that to the session; it submits.
2 · Sign a prepared request with a passkey, and send it
Paste the request the session prepared: {"path", "body", "credentialId"}. Review
shows exactly what the passkey will sign; the page stamps the time and sends it to Turnkey.