feat: expand companion platform, device controls, and memoir workflows

Add customer and operator login, BLE provisioning, device fleet controls, call memory, memoir generation, and refreshed family and maintenance portals. Include API contracts, migrations, firmware sources, tests, assets, and deployment documentation.

internal/onboarding/recovery_test.go

@@ -48,8 +48,14 @@ func TestIntegrationConsumedHandoffCannotReplayReplacement(t *testing.T) {
 }
 
 type captureSMS struct {
-	code  string
-	calls int
+	code    string
+	calls   int
+	purpose string
+}
+
+func (p *captureSMS) SendForPurpose(ctx context.Context, phone, code, id, purpose string) error {
+	p.purpose = purpose
+	return p.Send(ctx, phone, code, id)
 }
 
 func (p *captureSMS) Send(_ context.Context, _ string, code string, _ string) error {
@@ -75,7 +81,7 @@ func TestIntegrationSMSLoginRateAndOneTimeCode(t *testing.T) {
 			phone = phone[:i] + string('0'+(c-'a')) + phone[i+1:]
 		}
 	}
-	in := SMSSendInput{Phone: phone, Purpose: "LOGIN"}
+	in := SMSSendInput{Phone: phone, Purpose: "LOGIN", CaptchaID: f.knownCaptchaFor(f.web.Hash), CaptchaCode: "654321"}
 	id := uuid.NewString()
 	sent, err := f.s.SendSMS(f.ctx, f.web, id, in)
 	must(t, err)
@@ -84,6 +90,7 @@ func TestIntegrationSMSLoginRateAndOneTimeCode(t *testing.T) {
 	if sender.calls != 1 {
 		t.Fatal("SMS retry sent twice")
 	}
+	in.CaptchaID = f.knownCaptchaFor(f.web.Hash)
 	_, err = f.s.SendSMS(f.ctx, f.web, uuid.NewString(), in)
 	if err == nil {
 		t.Fatal("resend cooldown ignored")