Can someone provide screenshots of the completed Security Key LUKS login? I have seen what HEADS-Nitokey login looks like.
In addition to your chalresp method, there is also the GRUB-script page and the dracut-cryptenroll method for locking LUKS with a security key. Still many unanswered questions.