The official webauthn spec says that UV flag should be set only if userVerification is set to `required`: [See point 16 here](https://www.w3.org/TR/webauthn-3/#rp-op-verifying-assertion-step-rpid-hash). However the lib sets the UV flag not matter what for the first factor [here](https://github.com/webauthn-open-source/fido2-lib/blob/ba30d262955b2e54753b1e1698c99021f8468047/dist/main.cjs#L5808-L5811)
The official webauthn spec says that UV flag should be set only if userVerification is set to
required: See point 16 here.However the lib sets the UV flag not matter what for the first factor here