Bootstrap a passkey once. After that, /studio only requires your biometric.
To bootstrap the first passkey, the studio admin posts to /admin/create-registration-link with the X-Admin-Secret header. The returned URL is the only path that exposes a registration form.