CredLinkOperation
Describes the credential-related action CredLink should queue for a device.
Legacy PKOC and time sync use CredLink's active legacy key scope. Token unlocks are explicitly scoped by the caller because a device can hold multiple stored token passes.