https://gerrit.wikimedia.org/r/c/mediawiki/extensions/OATHAuth/+/1237232/4 removed the deprecated PublicKeyCredentialSourceRepository interface
Per @Catrope
Yeah I think the remaining code could probably move into some combination of WebAuthnKey, WebAuthn (the module class) or OATHUserRepository