The prf extension is the correct one to use at the WebAuthn level. hmac_secret is a lower-level extension which is specific to security keys.
prf
hmac_secret