feat(extension): update wasm.d.ts for secure device API

New WASM bindings that keep private keys internal.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

extension/src/wasm.d.ts

@@ -61,7 +61,22 @@ declare module 'relicario-wasm' {
 
   export function totp_compute(config_json: string, now_unix_seconds: bigint): TotpCode;
 
-  export function generate_device_keypair(): { public_key_hex: string; private_key_base64: string };
+  export function register_device(name: string): {
+    signing_public_key: string;
+    deploy_public_key: string;
+  };
+
+  export function sign_for_git(data: Uint8Array): {
+    signature: string;
+  };
+
+  export function get_device_info(): {
+    name: string;
+    signing_public_key: string;
+    deploy_public_key: string;
+  } | null;
+
+  export function clear_device(): void;
   export function get_field_history(item_json: string): unknown;
 
   export default function init(module_or_path?: unknown): Promise<void>;