Add support for Related Origin Requests with passkeys

[varjolintu]

Adds support for Related Origin Requests for passkeys. The specification for this is available here: https://www.w3.org/TR/webauthn-3/#sctn-related-origins

In short, the RP ID domain is requested for a list of related origins that can be used when registering a new passkey. For example Facebook and Microsoft is using this feature, and #2808 depends on this. KeePassXC side implementation is also needed for this to actually work. The Related Origins list is always downloaded from https://<RP_ID>/.well-known/webauthn.

The change also introduces a static timeout for the AbortSignal so the web requests will timeout after five seconds. Because of this the minimum browser versions must be upgraded.

Related KeePassXC side PR: keepassxreboot/keepassxc#12971

Testing strategy

For now the only way to check the related origins array is when a new passkeys is created in Facebook or Microsoft account page. A breakpoint must be set to the keepass.passkeysRegister() for checking the value. Actual validation for the labels will be implemented to KeePassXC side.

At least the following lists are found:
https://login.microsoftonline.com/.well-known/webauthn
https://accounts.meta.com/.well-known/webauthn
https://www.amazon.de/.well-known/webauthn

Type of change

• ✅ New feature (change that adds functionality)

[varjolintu]

Possibly the maximum amount of labels needs to be increased. For example Amazon has 56 labels in the list:
https://www.amazon.de/.well-known/webauthn

[varjolintu]

This is also needed for authentication.

[droidmonkey]

Since this bumps minimum browser version, this might be a change for 1.10.0 instead of a minor release.