Windows Hello prompt comes up every time I unlock the vault using a password

Thanks Dave, the links are helpful. They help illustrate the overlooked use case:

The authorization model for the 1Password SSH agent is built on the idea that you should be able to control which processes are allowed to use which private keys.

Alternatively, you should be able to control which applications are allowed to use which private keys, so that you don't have to re-auth every time you re-use the same application, as long as the vault is unlocked. If the vault is unlocked, the fact that I authorized the application to use the key Monday should be well enough for the application to re-use that same key Friday without reprompting me, even if I've rebooted the computer in between.

Here's the relevant part of the developer settings page:

The "Remember key approval" dropdown is missing a "forever" option.