feat(devices): P3 强制退出 + 清除增强(per-device 凭证吊销)

后端:新端点 POST /v1/me/devices/{uuid}/logout(ForceLogout:吊销该设备会话+
丢 Redis JTI,设备留列表)。DeleteDevice 增强:先吊销会话再删设备(FK ON DELETE
CASCADE 清理会话行)+ 按 dp_uuid 吊销数据面凭证。CredentialRevoker 接口改
per-device RevokeDevice(dpUUID),由 nodes.Service 实现(查 connect_credentials
持有节点→推 CommandTypeRevoke + 删凭证行),main 注入替 NoopRevoker;devices 注入
SessionPort/JTIRevoker。修 SQLite 跨连接死锁(会话吊销移到 delete tx 之前)。
migration 000016 sessions FK 加 ON DELETE CASCADE。
客户端:account_api.forceLogout + devicesProvider.forceLogout(UI 留 P6)。
测试:ForceLogout(吊销会话+JTI+设备保留+403/404)+ DeleteDevice(级联+按 dp_uuid
吊销);NoopRevoker 改 dp_uuid;全量 server/flutter 测试绿。

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

server/internal/devices/devices_integration_test.go

@@ -207,7 +207,13 @@ func TestFullChain(t *testing.T) {
 		t.Fatalf("expected 1 device after re-register, got %d", len(list))
 	}
 
-	// Delete → list drops to 0, audit row exists, revoker called.
+	// Give the device a data-plane credential (normally minted at connect) so
+	// clear-login revokes it per-device.
+	if _, err := db.Exec(`UPDATE devices SET dp_uuid=? WHERE uuid=?`, "dp-test-uuid", devUUID); err != nil {
+		t.Fatalf("set dp_uuid: %v", err)
+	}
+
+	// Delete → list drops to 0, audit row exists, revoker called with dp_uuid.
 	if apiErr := svc.DeleteDevice(ctx, userID, devUUID); apiErr != nil {
 		t.Fatalf("DeleteDevice: %v", apiErr)
 	}
@@ -226,8 +232,8 @@ func TestFullChain(t *testing.T) {
 	if len(revoker.Calls) != 1 {
 		t.Fatalf("expected 1 revoke call, got %d", len(revoker.Calls))
 	}
-	if revoker.Calls[0].UserID != userID || revoker.Calls[0].Reason != "device_deleted" {
-		t.Errorf("unexpected revoke call: %+v", revoker.Calls[0])
+	if revoker.Calls[0] != "dp-test-uuid" {
+		t.Errorf("unexpected revoke call: %q", revoker.Calls[0])
 	}
 }