devicePubKey → supplementalPubKeys

This change removes the `devicePubKey` extension but adds the very
similar `supplementalPubKeys` extension. The major difference between
the two is that the latter allows for one _or_ two supplemental keys,
and while supplemental keys can be device bound, they can also have
"provider" scope, which is defined by their attestation statement.