Phase 2: device registry, dashboard cards, manual lock/unlock, audit

- Device registry: add/edit name, child and platform, persisted in devices.
- Stable per-device topic derived from name + id, unchanged by renames.
- Desired state persisted in state; timed locks expire and are audited.
- Dashboard cards: name, child, platform, status dot, state and time left.
- Manual lock/unlock forms with CSRF; every change appends to audit (FR-15).
- Append-only activity list on the dashboard. No hard deletes (rule 10).
- Store and handler tests; version bumped to 0.2.0-phase2.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

docker-compose.yml

@@ -9,8 +9,8 @@ services:
     build:
       context: .
       args:
-        VERSION: "0.1.0-phase1"
-    image: webrestrict/control:0.1.0-phase1
+        VERSION: "0.2.0-phase2"
+    image: webrestrict/control:0.2.0-phase2
     container_name: webrestrict-control
     restart: unless-stopped
     env_file: