Require --with-security-key-builtin before enabling the built-in security key support (and consequent dependency on libfido2).
A number of contrib/* files refer to the existing README so let's leave it in place for release and add the new markdown version in parallel. I'll get rid of README after release.