implement attestation verification for ED25519 keys

add a work-in-progress tool to verify FIDO attestation blobs
that ssh-keygen can write when enrolling FIDO keys.