I’m now the proud owner of a Crypto Stick, an OpenPGP smartcard implementation in USB stick form. It is apparently capable of generating and using 4096-bit keys, but GnuPG has a limit of 3072 bits (quick tests and git master show this is still the case).