v1.2.0: register + OTP verify, passkey auth/register transport, social start-URL + exchange, required X-Aice-Audience
