Device Management

Devices are registered when the desktop app signs in. Website never invents devices.

GET /api/devices

Device removal requires backend verification of ownership. Do not trust client-supplied IDs.