Allow dev to customize what algo's they support instead of hard coding in CredentialCreateOptions

[abergs]

For conformance we must support RS1, but it should be left out from being enabled by default (suggested by @aseigler, could you expand the reasoning for disabling RS1?)

[aseigler]

It's deprecated https://www.iana.org/assignments/cose/cose.xhtml#algorithms, it uses SHA1, so it's not recommended for use, but the conformance testing requires it be supported for...reasons.