Function build_state 

pub fn build_state(config: &WebauthnConfig) -> Option<WebauthnState>

Builds the relying-party [Webauthn] from config, or returns None (logged, never panics) when passkeys are disabled or the rp_id/rp_origin are invalid — token sign-in keeps working either way (graceful degradation, the robustness mandate).