So I got some cheap Pico Microcontrolers and I’ve been playing with this: https://www.picokeys.com/pico-hsm/

secp256k1 is one of the supported keypairs so I think I can use it to generate and store Nostr keys.