feat(web): "Pair a device" card — native pairing from the console

Completes the web-UI native (punktfunk/1) pairing flow the unified host backs.
The Pairing page now leads with a native card that arms a window via the mgmt API
and DISPLAYS the host PIN (the SPAKE2 ceremony is host-mints / client-enters) with
a live countdown + Cancel, plus a paired-devices list with unpair — no journalctl.
The existing Moonlight PIN-submit moves into its own section below.

Uses the orval-generated `native` hooks (regenerated from the committed OpenAPI on
build) + en/de strings. Validated end-to-end through the web server's proxy + cookie
auth: login → status → arm (PIN shown) → clients. tsc + production build clean.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

web/messages/de.json

@@ -48,6 +48,17 @@
   "pairing_submit": "PIN bestätigen",
   "pairing_success": "Erfolgreich gekoppelt.",
   "pairing_failed": "Kopplung fehlgeschlagen — PIN prüfen und erneut versuchen.",
+  "pairing_native_title": "Gerät koppeln",
+  "pairing_native_desc": "Zeige hier eine Einmal-PIN an und gib sie in deiner punktfunk-App ein, um dieses Gerät zu koppeln.",
+  "pairing_native_disabled": "Der native Host läuft nicht. Starte ihn mit `serve --native`, um punktfunk-Geräte zu koppeln.",
+  "pairing_native_arm": "Gerät koppeln",
+  "pairing_native_enter": "Gib diese PIN auf deinem Gerät ein:",
+  "pairing_native_expires": "Läuft ab in",
+  "pairing_native_cancel": "Abbrechen",
+  "pairing_native_devices": "Gekoppelte Geräte",
+  "pairing_native_empty": "Noch keine Geräte gekoppelt.",
+  "pairing_native_unpair_confirm": "Dieses Gerät entkoppeln? Es muss sich erneut koppeln, um zu verbinden.",
+  "pairing_moonlight_title": "Moonlight-Kopplung (GameStream)",
   "settings_title": "Einstellungen",
   "settings_token_label": "API-Token",
   "settings_token_help": "Bearer-Token für die Verwaltungs-API. Bei einem Loopback-Host ohne Token leer lassen.",

web/messages/en.json

@@ -48,6 +48,17 @@
   "pairing_submit": "Submit PIN",
   "pairing_success": "Paired successfully.",
   "pairing_failed": "Pairing failed — check the PIN and try again.",
+  "pairing_native_title": "Pair a device",
+  "pairing_native_desc": "Show a one-time PIN here, then enter it in your punktfunk app to pair this device.",
+  "pairing_native_disabled": "The native host isn't running. Start it with `serve --native` to pair punktfunk devices.",
+  "pairing_native_arm": "Pair a device",
+  "pairing_native_enter": "Enter this PIN on your device:",
+  "pairing_native_expires": "Expires in",
+  "pairing_native_cancel": "Cancel",
+  "pairing_native_devices": "Paired devices",
+  "pairing_native_empty": "No devices paired yet.",
+  "pairing_native_unpair_confirm": "Unpair this device? It will need to pair again to connect.",
+  "pairing_moonlight_title": "Moonlight (GameStream) pairing",
   "settings_title": "Settings",
   "settings_token_label": "API token",
   "settings_token_help": "Bearer token for the management API. Leave empty for a loopback host with no token.",