WebAuthnManager's MakeCredential method takes parameters describing what kind of keys the RP would like to use -- P-256 curve keys from FIDO U2F, for example, or maybe only something newer from CTAP. WebAuthnManager doesn't know enough to filter this information, so we need to move the "for Options.mPubKeyCredParams" logic down into the U2FTokenManager where it knows enough to only accept U2F-capable parameters.

Unblocking WD-07 on this; it's not critical.