A separate key from the signing one — same process, different application name:
ssh-keygen -t ed25519-sk -O resident -O application=ssh:<your-username>-auth -O user=<your-username> -C "<your-email>" -f "$env:USERPROFILE\.ssh\id_ed25519_sk_<your-username>-auth"