Coarse classification of the authenticator that registered a passkey, derived from the WebAuthn AAGUID. Drives the per-row icon in account settings without leaking the raw AAGUID to the client.