fix(profile): Reauth für Passkey-Umbenennung und Geräte-Dialog

PATCH /credentials verlangt requireReauth wie add/delete; Client ruft
reauthWithPasskey vor rename auf. Abbrechen-Text beim Gerät vergessen korrigiert.

Co-authored-by: Cursor <cursoragent@cursor.com>

server/src/routes/auth.ts

@@ -587,7 +587,7 @@ router.post('/add-credential-verify', requireReauth, async (req: any, res) => {
   }
 })
 
-router.patch('/credentials/:id', requireUser, async (req: any, res) => {
+router.patch('/credentials/:id', requireReauth, async (req: any, res) => {
   try {
     const { id } = req.params
     const label = normalizeCredentialLabel(req.body?.label)