Device login
POST /api/cli/auth/device returns a device code and user code.
Poll for token
POST /api/cli/auth/poll exchanges the device code for a token.
User info
GET /api/cli/auth/me returns user and account data.
App management
GET /api/cli/apps lists apps for the authenticated user.
POST /api/cli/apps creates an app.
GET /api/cli/apps/{app}/config pulls app config.
PUT /api/cli/apps/{app}/config updates app config.