feat: complete device onboarding and mobile binding workflows

test/fixtures/local_seed.sql

@@ -143,6 +143,12 @@ VALUES (
 ON CONFLICT (device_id) DO UPDATE SET desired_config = EXCLUDED.desired_config,
     capabilities = EXCLUDED.capabilities, updated_at = now();
 
+-- This unbound terminal predates lifecycle migration 50. Seeding happens after
+-- migrations, so establish its actual lifecycle explicitly for repeatable tests.
+UPDATE device SET activation_state='CLAIMABLE'
+WHERE id='10000000-0000-0000-0000-000000000502'::uuid
+ AND enrollment_mode='legacy' AND NOT EXISTS(SELECT 1 FROM device_binding WHERE device_id=device.id AND unbound_at IS NULL);
+
 INSERT INTO device_claim (
     id, public_id, tenant_id, device_id, token_digest, expires_at
 )