Write apps/backend/docs/concepts-e2ee-key-management.md explaining the backend's role in the E2EE key lifecycle: device registration, prekey upload/consumption, key-bundle fetch, revocation, and how the devices/devicePrekeys tables model this.
Acceptance criteria:
- Explains device registration through to revocation as one coherent lifecycle, referencing the actual routes/tables involved by name
- Explains what the server can and cannot see (no private key material ever touches the backend) as an explicit statement
- Cross-references the relevant
api-*.md and contracts-*.md docs
Write
apps/backend/docs/concepts-e2ee-key-management.mdexplaining the backend's role in the E2EE key lifecycle: device registration, prekey upload/consumption, key-bundle fetch, revocation, and how thedevices/devicePrekeystables model this.Acceptance criteria:
api-*.mdandcontracts-*.mddocs