feat(auth): add device session tracking with configurable limits

Track authenticated sessions per device (parsing user-agent for desktop
vs mobile via mileusna/useragent), enforce configurable concurrent device
limits (Auth.DeviceLimits), and surface device status and "remove other
devices" management in the account dialog. Adds device/session context to
the auth module stores and exposes limits through the API.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

server/internal/logic/list_account_devices_logic.go

@@ -32,5 +32,12 @@ func (l *ListAccountDevicesLogic) ListAccountDevices() (resp *types.AccountDevic
 	if err != nil {
 		return nil, err
 	}
-	return &types.AccountDeviceListResponse{Devices: toAPIAccountDevices(devices)}, nil
+	limits := l.svcCtx.AuthService.DeviceLimits()
+	return &types.AccountDeviceListResponse{
+		Devices: toAPIAccountDevices(devices),
+		Limits: types.AccountDeviceLimits{
+			Desktop: limits.Desktop,
+			Mobile:  limits.Mobile,
+		},
+	}, nil
 }