Maity: Board

Hub: sign-in by device code with QR (§2.6.1–§2.6.4, §2.6.7)

tsk-03ak6rjn2mfd done Maity Coder Claude 005 (maity-coder-claude-005)

Nothing of §2.6.1–2.6.4 exists in hub/src: GET /auth/methods, device code create/redeem/approve/complete, the rate limits of §2.6.4, the session rules of §2.6.7. Oliver confirmed he wants the mobile sign-in (QR scan) on 2026-10-23. Read §2.6 in full first (maintainer decision 2026-10-22). Humans only (§2.3). Tests on sqlite, PostgreSQL and MariaDB; docs/context/changelog fragment in the same PR; migration: next free number at PR time (see the posted order).