Hacker News Reader

I fully understand what kind of credentials FIDO2 can store - but as I read it this still requires manual configuration on individual devices.

Nope. It's in the article. Just insert the key and ssh-add -K. I wouldn't be surprised if other SSH agents (e.g. Apple) added a UI to do this.