API endpoint to list available authenticators for a specific client

[krotscheck]

This allows a client to dynamically figure out what options are available for logging in.

[krotscheck]

Tricky topic: This needs to be publicly available, without authentication.

[krotscheck]

Is this a valid target for a webfinger resource?