Begin CLI browser pairing

POST/v1/public/auth/cli/start

Public. Starts a device pairing for `renza login`: returns a secret `device_code` (poll with it) and a short `user_code` + browser URL where the user approves it — minting a user key that acts as them.

Public — no authentication required. Supports idempotency keys.

Powers the `renza login` browser pairing flow; not called directly.

Returns

201The started pairing.

Failures use the standard error envelope with a closed set of codes.

POST /v1/public/auth/cli/start

curl https://api.renza.io/v1/public/auth/cli/start \
  -X POST

Response 201

{
  "device_code": "x7Qk9v…",
  "user_code": "BCDF-2345",
  "verification_uri": "https://renza.io/cli",
  "verification_uri_complete": "https://renza.io/cli?code=BCDF2345",
  "interval": 5,
  "expires_in": 600
}