Validate Apple App Attest authenticator extensions

[pke]

Summary

• parse and type-check apple_validation_category_01 and apple_bundle_version_01 from attestation authenticator data
• add optional validation-category and bundle-version allowlists plus a strict mode requiring both extensions
• preserve existing extensionless behavior when no strict policy is configured
• return verified extension values and document the API with generated TypeScript declarations
• cover Apple’s current sample fixture and malformed, partial, disallowed, Map, and backward-compatibility cases

Verification

• npm test -- --runInBand (50 tests, 100% statements/branches/functions/lines)
• npm run lint:check
• npm run format:check
• npm run types

The test fixture is sourced from Apple’s current attestation object validation guide.