WIP: Windows Hello Authentication

[nzbr]

This adds an option to approve sudo and other login prompts through Windows Hello (Fingerprint/Face/PIN/etc.) instead of a password or not at all (as is the default)

[nzbr]

This seems to stop working sometimes (exit code 255 from the .exe). That can be fixed by opening a new shell - it's probably related to the WSL_INTEROP socket

[SuperSandro2000]

Also https://github.com/nzbr/PAM-WindowsHello#--%EF%B8%8F-you-probably-do-not-want-to-use-this-for-anything-security-critical-%EF%B8%8F---i-am-not-responsible-for-anyone-bypassing-the-login-on-a-system-you-install-this-to

[aikooo7]

What needs to be done to this be merged?

[nzbr]

The Nix code in this PR is pretty outdated and would probably need to be adjusted to the current state of the main branch. Also the windows binary this uses can't be cross-compiled on linux and therefore needs to be pulled in as a binary blob. If that's possible the windows part should be rewritten in something like rust where that's possible, so that it can be built in a derivation

[Cu3PO42]

I actually did a rewrite of both the PAM module and the Windows side (in Rust) for this roughly two years ago. It also doesn't use any unsupported APIs anymore and should cross-compile. It worked, but I have a feeling it wasn't fully done. It's currently rotting in a private repo, but I'll see about cleaning it up.

[nzbr]

That'd be really cool, tbh