- /register endpoint no longer requires verifyAPIRequest() - it is
the bootstrap handshake and api_secret cannot be set before it runs
- Add api_secret field to the Add Board form (hardware boards only)
with a cryptographic Generate button, same as the Edit form
- Save api_secret from the add-board POST so the driver can sign
requests immediately after registration
scheianu
fbf5802c69