feat(client): add authorized WireGuard device enrollment and desktop connection

frontend/src/locales/en-US.json

@@ -334,6 +334,7 @@
   },
   "users": {
     "title": "User Management",
+    "clientLoginHint": "These accounts sign in to the admin console. Desktop VPN clients use VPN dial-in users assigned to a WireGuard line.",
     "batchImport": "Batch Import",
     "ldapImport": "LDAP Import",
     "addUser": "Add User",
@@ -396,6 +397,20 @@
     "emptyUsername": "(empty)",
     "errorDetails": "Error details:"
   },
+  "clientDevices": {
+    "title": "Client Devices",
+    "hint": "Devices registered by desktop/mobile clients; revocation takes effect immediately",
+    "deviceName": "Device",
+    "platform": "Platform",
+    "tunnel": "Line",
+    "address": "Assigned IP",
+    "lastHandshake": "Last Handshake",
+    "revoked": "Revoked",
+    "revoke": "Revoke",
+    "revokeConfirm": "The device will be disconnected immediately and cannot reconnect. Continue?",
+    "revokeDone": "Device revoked",
+    "empty": "No client devices registered"
+  },
   "vpnUsers": {
     "title": "VPN Dial-in Users",
     "mfaHint": "OpenVPN Two-Factor Auth (TOTP / Static Challenge / PIN+OTP)",
@@ -718,6 +733,7 @@
     "nodes": "Nodes",
     "users": "Users",
     "vpnUsers": "VPN Dial-in Users",
+    "clientDevices": "Client Devices",
     "plugins": "Protocol Plugins",
     "settings": "Settings",
     "logs": "Log Center",