There is something in the works for a hardware token for wireguard keys.
I don’t know if this will be maintained, however. Could the nitrokeys maybe make us of this?
A hardware token for Wireguard keys has been asked for several times on the respective mail list or reddit.