fix(devices+stats): /v1/me/devices 401 修复 + 设备下拉接已登录设备 + 版本号

① 「我的设备打不开」根因:devices handler 读 devices.CtxKeyUserID,而鉴权中间件
   把 user id 写在 auth 的 key 下(类型不同→取不到)→ /v1/me/devices 一直 401。
   改 handler 用 auth.UserIDFromContext(与 accountAPI 等一致)。
② 统计页设备下拉改读 devicesProvider(已登录设备),不再只列有用量的设备 →
   windows 设备现在会出现。
③ pubspec version 1.0.2+3 → 1.0.11+12,client_version 不再显示陈旧的 v1.0.2。
测试:devices_screen + stats_device_filter widget(下拉读 /v1/me/devices)+全量绿。

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

server/internal/devices/handler.go

@@ -6,6 +6,7 @@ import (
 
 	"github.com/go-chi/chi/v5"
 	"github.com/wangjia/pangolin/server/internal/apierr"
+	"github.com/wangjia/pangolin/server/internal/auth"
 )
 
 // Handler serves the account device endpoints. It assumes the JWT auth
@@ -35,7 +36,7 @@ type listDevicesResponse struct {
 
 // ListDevices handles GET /v1/me/devices.
 func (h *Handler) ListDevices(w http.ResponseWriter, r *http.Request) {
-	userID, ok := UserIDFromContext(r.Context())
+	userID, ok := auth.UserIDFromContext(r.Context())
 	if !ok {
 		apierr.WriteJSON(w, http.StatusUnauthorized, apierr.ErrUnauthorized)
 		return
@@ -54,7 +55,7 @@ func (h *Handler) ListDevices(w http.ResponseWriter, r *http.Request) {
 
 // DeleteDevice handles DELETE /v1/me/devices/{id}.
 func (h *Handler) DeleteDevice(w http.ResponseWriter, r *http.Request) {
-	userID, ok := UserIDFromContext(r.Context())
+	userID, ok := auth.UserIDFromContext(r.Context())
 	if !ok {
 		apierr.WriteJSON(w, http.StatusUnauthorized, apierr.ErrUnauthorized)
 		return
@@ -72,7 +73,7 @@ func (h *Handler) DeleteDevice(w http.ResponseWriter, r *http.Request) {
 // ForceLogout handles POST /v1/me/devices/{id}/logout — revoke the device's
 // sessions (kick it offline); the device stays in the list.
 func (h *Handler) ForceLogout(w http.ResponseWriter, r *http.Request) {
-	userID, ok := UserIDFromContext(r.Context())
+	userID, ok := auth.UserIDFromContext(r.Context())
 	if !ok {
 		apierr.WriteJSON(w, http.StatusUnauthorized, apierr.ErrUnauthorized)
 		return