v0.4.8 — Fix wrong field name for device authorize

Fix: the per-device write token was silently empty because the xlink subscribe/devices response uses the field name authorize_code, not authorize. The correct token 1e3e82c37ac79c23 is now extracted and used as the Access-Token for write operations.