fix: add /api/device-token and /api/device-pair routes to netlify.toml
Functions need explicit redirect rules to be reachable via /api/ paths.
Also excluded from SPA catch-all edge function.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>