Validate credential ID length per WebAuthn Level 3 spec

[dorakemon]

Hello.

I found parseAuthenticatorData does not enforce the credential ID length limit defined in the WebAuthn Level 3 spec.

§ 7.1 Registering a New Credential, step 25 states:

Verify that the credentialId is ≤ 1023 bytes. Credential IDs larger than this many bytes SHOULD cause the RP to fail this registration ceremony.

So I implemented with tests in my fork
dorakemon@1f6c39c