GrapheneOS doesn't come with play services so that might be part of the issue. MircoG (the FOSS reimplementation of the play services) just implemented FIDO2 support but PIN support seems to be generally lacking on Android. (I can't link to it but my source would be issue #849 in the "GsmCore"-Project on GitHub.)