You can use OAuth with the Spark. There’s a Wordpress plugin for example.
It shouldn’t be too hard to implement VivoKey as identity provider.
I think Yubikey will only be supported on the Apex.
You can store data in the VK key value store, that’s a little password manager like.
Somewhere in here should be anything you need (e.g. scan api docs).