Device Based Authentication
Added Blade components + JS helpers for WebAuthn passkeys, Cognito challenges, and device registration/auth flows.
Added Cognito device management actions (confirm/list/update/forget) and wired new web/api routes.
Refactored SRP/challenge handling and error/status propagation across guards, services, and exceptions.