fix: include WebAuthn in bootstrap MFA factors

Bootstrap only set [Totp, BackupCode] — WebAuthn was missing. Now
matches LogtoStartupConfig: all three factors available from first boot.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docker/logto-bootstrap.sh

@@ -616,7 +616,7 @@ api_patch "/api/sign-in-exp" '{
     ]
   },
   "mfa": {
-    "factors": ["Totp", "BackupCode"],
+    "factors": ["Totp", "WebAuthn", "BackupCode"],
     "policy": "UserControlled"
   }
 }' >/dev/null 2>&1