Fix issue with allow_list & rk credential (re-release)

Fixes a small issue where if an allow_list is specified and rk credentials are matched, all of them would get returned. The correct behavior is to only return one.

Thanks to @drbinson of @MeaVitae for finding this and making a great demo: https://github.com/MeaVitae/mv-security-key-test

Update:
This is replacing 4.1.3 where I mistakenly compiled the firmware with the button disabled.