Devices

Device-slot management

Staging shell for add, replace, revoke, and future config/QR requests.

Add device request

This creates a browser-only staging row. Later it will insert into devices and vpn_actions.

No live configs: Download config and show QR actions stay disabled until the VPN control plane exists.