Apparently, to use passkeys under GrapheneOS with KeepassDX, if you used an old version of kp before, you have to go to the system settings, disable the password/passkey service, and set it to keepassdx again.
It didn't work for me before, now it does.
(No google services required)