Passwords and passkeys each involve a secret. The critical difference: How that secret gets handled.