refactor(api): restructure tags system with dedicated collection

- Remove device and public key tag operations from individual services
- Create centralized tag management with dedicated tags collection
- Replace inline tag arrays with reference-based tagging system
- Add new tag endpoints for CRUD operations and target association
- Update device and public key models to use Taggable embedding
- Migrate existing tags to new collection structure
- Remove deprecated tag-related routes and handlers
- Update fixtures and tests for new tag architecture

Author: heiytor

api/routes/device.go

@@ -19,16 +19,12 @@ const (
 	OfflineDeviceURL      = "/devices/:uid/offline"
 	LookupDeviceURL       = "/device/lookup"
 	UpdateDeviceStatusURL = "/devices/:uid/:status"
-	CreateTagURL          = "/devices/:uid/tags"      // Add a tag to a device.
-	UpdateTagURL          = "/devices/:uid/tags"      // Update device's tags with a new set.
-	RemoveTagURL          = "/devices/:uid/tags/:tag" // Delete a tag from a device.
 	UpdateDevice          = "/devices/:uid"
 )
 
 const (
 	ParamDeviceID     = "uid"
 	ParamDeviceStatus = "status"
-	ParamTagName      = "name"
 )
 
 func (h *Handler) GetDeviceList(c gateway.Context) error {
@@ -244,57 +240,6 @@ func (h *Handler) UpdateDeviceStatus(c gateway.Context) error {
 	return c.NoContent(http.StatusOK)
 }
 
-func (h *Handler) CreateDeviceTag(c gateway.Context) error {
-	var req requests.DeviceCreateTag
-	if err := c.Bind(&req); err != nil {
-		return err
-	}
-
-	if err := c.Validate(&req); err != nil {
-		return err
-	}
-
-	if err := h.service.CreateDeviceTag(c.Ctx(), models.UID(req.UID), req.Tag); err != nil {
-		return err
-	}
-
-	return c.NoContent(http.StatusOK)
-}
-
-func (h *Handler) RemoveDeviceTag(c gateway.Context) error {
-	var req requests.DeviceRemoveTag
-	if err := c.Bind(&req); err != nil {
-		return err
-	}
-
-	if err := c.Validate(&req); err != nil {
-		return err
-	}
-
-	if err := h.service.RemoveDeviceTag(c.Ctx(), models.UID(req.UID), req.Tag); err != nil {
-		return err
-	}
-
-	return c.NoContent(http.StatusOK)
-}
-
-func (h *Handler) UpdateDeviceTag(c gateway.Context) error {
-	var req requests.DeviceUpdateTag
-	if err := c.Bind(&req); err != nil {
-		return err
-	}
-
-	if err := c.Validate(&req); err != nil {
-		return err
-	}
-
-	if err := h.service.UpdateDeviceTag(c.Ctx(), models.UID(req.UID), req.Tags); err != nil {
-		return err
-	}
-
-	return c.NoContent(http.StatusOK)
-}
-
 func (h *Handler) UpdateDevice(c gateway.Context) error {
 	req := new(requests.DeviceUpdate)