fetchPublicCredential
Creates or reuses the P-256 key bound to a temporary-pass namespace.
This is the app-facing shape required by temporary grants. The current implementation reuses CredLink's secure platform key storage while the Access Document Presentation transaction is being built.