feat(cli): add Gitea API client for deploy keys

Create, delete, and list deploy keys via Gitea REST API.
Foundation for device authentication.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

crates/relicario-cli/tests/settings.rs

@@ -66,7 +66,7 @@ fn generate_uses_vault_default_length() {
 }
 
 #[test]
-fn status_reports_item_attachment_and_device_counts() {
+fn status_reports_item_and_attachment_counts() {
     let v = TestVault::init();
     v.run(&["add", "login", "--title", "active",
            "--username", "u", "--password", "p"]);
@@ -99,8 +99,7 @@ fn status_reports_item_attachment_and_device_counts() {
     assert!(lower.contains("attachment"), "missing attachment section: {stdout}");
     assert!(stdout.contains("11"), "expected 11-byte size in output: {stdout}");
 
-    // 0 devices in default test vault (init does not register one).
-    assert!(lower.contains("device"), "missing devices section: {stdout}");
+    // device count line removed — device key system was security theater (audit B1).
 
     // Last-commit line.
     assert!(