Remove token binding

[aseigler]

Token binding was removed from the spec w3c/webauthn#1627.

[abergs]

Since this will break call signatures, we need to do it in v4.

[abergs]

Tokenbinding was removed, but had to be re-introduced to satisfy conformance. It's however a bit hidden in the API.