feat(devices): P3 强制退出 + 清除增强(per-device 凭证吊销)

后端:新端点 POST /v1/me/devices/{uuid}/logout(ForceLogout:吊销该设备会话+
丢 Redis JTI,设备留列表)。DeleteDevice 增强:先吊销会话再删设备(FK ON DELETE
CASCADE 清理会话行)+ 按 dp_uuid 吊销数据面凭证。CredentialRevoker 接口改
per-device RevokeDevice(dpUUID),由 nodes.Service 实现(查 connect_credentials
持有节点→推 CommandTypeRevoke + 删凭证行),main 注入替 NoopRevoker;devices 注入
SessionPort/JTIRevoker。修 SQLite 跨连接死锁(会话吊销移到 delete tx 之前)。
migration 000016 sessions FK 加 ON DELETE CASCADE。
客户端:account_api.forceLogout + devicesProvider.forceLogout(UI 留 P6)。
测试:ForceLogout(吊销会话+JTI+设备保留+403/404)+ DeleteDevice(级联+按 dp_uuid
吊销);NoopRevoker 改 dp_uuid;全量 server/flutter 测试绿。

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

server/internal/devices/store.go

@@ -19,6 +19,7 @@ type DeviceRow struct {
 	LastSeen      sql.NullTime
 	CreatedAt     time.Time
 	ClientVersion sql.NullString // 000016: latest reported app version
+	DpUUID        sql.NullString // per-device data-plane credential (000015)
 }
 
 // effSub is an active-or-expired subscription joined with its plan, used by the
@@ -80,13 +81,31 @@ func (s *Store) ListByUser(ctx context.Context, userID int64) ([]DeviceRow, erro
 // Returns (nil, nil) when the device does not exist.
 func (s *Store) findDeviceByUUIDTx(ctx context.Context, tx *sql.Tx, uuid string) (*DeviceRow, error) {
 	row := tx.QueryRowContext(ctx,
-		`SELECT id, uuid, user_id, name, platform, last_seen, created_at
+		`SELECT id, uuid, user_id, name, platform, last_seen, created_at, client_version, dp_uuid
 		 FROM devices WHERE uuid=? `+s.dialect.LockForUpdate(), uuid)
+	return scanDeviceRow(row)
+}
+
+// FindByUUID looks up a device by UUID (non-tx). Returns (nil, nil) if absent.
+// Used by force-logout/delete to resolve ownership + dp_uuid.
+func (s *Store) FindByUUID(ctx context.Context, uuid string) (*DeviceRow, error) {
+	row := s.db.QueryRowContext(ctx,
+		`SELECT id, uuid, user_id, name, platform, last_seen, created_at, client_version, dp_uuid
+		 FROM devices WHERE uuid=?`, uuid)
+	return scanDeviceRow(row)
+}
+
+type rowScanner interface {
+	Scan(dest ...any) error
+}
+
+func scanDeviceRow(row rowScanner) (*DeviceRow, error) {
 	var d DeviceRow
-	if err := row.Scan(&d.ID, &d.UUID, &d.UserID, &d.Name, &d.Platform, &d.LastSeen, &d.CreatedAt); err == sql.ErrNoRows {
+	if err := row.Scan(&d.ID, &d.UUID, &d.UserID, &d.Name, &d.Platform,
+		&d.LastSeen, &d.CreatedAt, &d.ClientVersion, &d.DpUUID); err == sql.ErrNoRows {
 		return nil, nil
 	} else if err != nil {
-		return nil, fmt.Errorf("store.findDeviceByUUIDTx: %w", err)
+		return nil, fmt.Errorf("store.scanDeviceRow: %w", err)
 	}
 	return &d, nil
 }