Issue a single-use register nonce (5 min TTL).
Successful Response
Register nonce minted by POST /attest/challenge.