Device authorization (TV / IoT / no browser)

Devices with no browser or keyboard (TVs, speakers, robots, a CLI inside a remote SSH session) use the RFC 8628 device flow. The device shows an 8-character code, the user enters it on their phone and approves, and the device polls for the credential.

Machine-readable: /llms.txt, /models.md (append .md to any docs URL for raw markdown)