Implement Bearer token authentication for device API
- Create authentication mechanism that looks up device by API key from Authorization: Bearer {api_key} header
- Return 401 Unauthorized when API key is invalid or revoked
- Scope all /api/v1/devices/me/* endpoints to the authenticated device