buildEncryptedResponse

Creates the device response, applies device authentication, and HPKE-encrypts it for the verifier.