Edge devices

Read-only L1 device inventory exposed through L4 (ADR-008), same contract as YAML under SECUREFLOW_DEVICE_INVENTORY_DIR.