SuperTokens-style: first sign-in is email (or Konnos). Then use Add passkey in the dashboard for Face ID / Touch ID next time.