[WebAuthN] Use a real nonce for CTAPHID_INIT