Implement pairing session with ten-minute expiry and one-use exchange.
Started a focused implementation slice for shared contracts and validation.
Typecheck passed. Migration pending: pairing_sessions, devices, user_sessions.