Passkeys are a production-ready, phishing-resistant authentication primitive built into the web platform. This is a deep, protocol-level guide for engineering teams replacing passwords for real.