at least as of a few days ago, I had it working, partially.
from what I grasped specifically needed support for extended length encoding on the applet selection APDU which causes several FIDO devices to crap out including ones clearly marked as certified (e.g. from Cryptnox or older Token2 devices)
not sure where applet selection using extended length is required for CTAP2 because I heavily hope non-compliant devices wouldn't get certified, and as far as I read the CTAP2 standard, it only asked for extended length in CTAP2 commands, not the applet selection.