Add clinical device registry, browser wedge scan, and local agent API.

Branch-scoped Care devices with hashed agent tokens, patient barcode lookup/labels, and provenance-aware vitals from a minimal device agent (Pro for agent hardware; wedge free).

Co-authored-by: Cursor <cursoragent@cursor.com>

app/Services/Care/CarePermissions.php

@@ -51,6 +51,7 @@ class CarePermissions
         'admin.practitioners.view', 'admin.practitioners.manage',
         'admin.members.view', 'admin.members.manage',
         'settings.view', 'settings.manage',
+        'devices.view', 'devices.manage',
         'audit.view', 'audit.export',
     ];