fix: don't treat passkeys as AAL2

[hperl]

Related issue(s)

Checklist

• I have read the contributing guidelines.
• I have referenced an issue containing the design document if my change
  introduces a new feature.
• I am following the
  contributing code guidelines.
• I have read the security policy.
• I confirm that this pull request does not address a security
  vulnerability. If this pull request addresses a security vulnerability, I
  confirm that I got the approval (please contact
  security@ory.sh) from the maintainers to push
  the changes.
• I have added tests that prove my fix is effective or that my feature
  works.
• I have added or changed the documentation.

Further Comments

[zepatrik]

Fine by me, as we don't know how the passkey was secured.

Why did we not do it initially though?

[hperl]

Fine by me, as we don't know how the passkey was secured.

Why did we not do it initially though?

It was an oversight by me.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 77.99%. Comparing base (5aad1c1) to head (30f45ab).
Report is 1 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #3853      +/-   ##
==========================================
+ Coverage   77.95%   77.99%   +0.04%     
==========================================
  Files         359      359              
  Lines       25203    25203              
==========================================
+ Hits        19646    19658      +12     
+ Misses       4049     4037      -12     
  Partials     1508     1508              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.