Can ECDH be used for authentication?
Here’s a link that shows how to implement ECDH with long term public keys and ephemeral shared keys. You could just add this authentication after the TLS handshake as it’s own layer. Think about the openID protocol.  You can publish the keys at a well-known-endpoint,  it’s not necessary to wrap them in a certificate.