I've not tried Webauthn in the context of Extensions. This might be a good option to lock/unlock the wallet.