v0.4.0-rc.4

• Update to ctap-types v0.6.0-rc.5.
• Add long_touch_for_reset to Config and, if set, implement the enableLongTouchForReset subcommand for config and always require a long touch for a reset.
• Add fido2_up_timeout to Config.
• Always delete the credential key if make_credential fails.
• Use constant-time comparisons for PIN hashes and PIN auth verification.
• Don’t decrement the PIN retry counter for invalid pinAuth data in credential_management.
• Also enforce the credProtect extension over U2F/CTAP1.
• Add initial and max usage timer for PIN tokens.