buildLegacyBridgeEphemeralKeyPayload

PKOC step B (phone side): generates a fresh P-256 ephemeral key pair, stores it, and returns the bridge ephemeral public key write payload (TLV tag 0x07).