Add clinical device registry, browser wedge scan, and local agent API.

Branch-scoped Care devices with hashed agent tokens, patient barcode lookup/labels, and provenance-aware vitals from a minimal device agent (Pro for agent hardware; wedge free).

Co-authored-by: Cursor <cursoragent@cursor.com>

app/Providers/AppServiceProvider.php

@@ -7,7 +7,10 @@ use App\Listeners\PlatformServiceEventListener;
 use App\Models\User;
 use App\Services\Care\OrganizationResolver;
 use App\Services\Care\PlanService;
+use Illuminate\Cache\RateLimiting\Limit;
+use Illuminate\Http\Request;
 use Illuminate\Support\Facades\Event;
+use Illuminate\Support\Facades\RateLimiter;
 use Illuminate\Support\Facades\View;
 use Illuminate\Support\ServiceProvider;
 
@@ -22,6 +25,15 @@ class AppServiceProvider extends ServiceProvider
     {
         Event::listen(ServiceEventOccurred::class, PlatformServiceEventListener::class);
 
+        RateLimiter::for('care-device', function (Request $request) {
+            $token = $request->header('X-Care-Device-Token')
+                ?? $request->header('X-Device-Token')
+                ?? $request->bearerToken()
+                ?? $request->ip();
+
+            return Limit::perMinute(60)->by((string) $token);
+        });
+
         View::composer([
             'partials.sidebar',
             'partials.topbar-desktop-widgets',