Python 2.1: cover storage, device authorization and OAuth APIs #60

Python SDK 2.0 covers all 44 documented API operations in #57, stacked on #56. The agreed 2.1 follow-up is the 16 additional ordinary API routes explicitly marked separate-product-surface in API2's public contract.

Source: API2 27622f3ecd09ffef6fc86a43dcfe14b95deaaad6, api2/generated/contracts/v1/contract.json.

• api2.storage-grants-create
• api2.storage-public-prefixes-list
• api2.storage-public-prefixes-declare
• api2.storage-public-prefixes-revoke
• api2.cli-device-authorizations-create
• api2.cli-device-authorizations-approve
• api2.cli-device-authorizations-deny
• api2.cli-device-authorizations-token
• api2.cli-device-authorizations-find
• api2.oauth-client-register
• api2.oauth-authorize-context
• api2.oauth-authorization-codes-create
• api2.oauth-revoke
• api2.oauth-connections-list
• api2.oauth-connection-revoke
• api2.revoke-own-auth-key

Add sync and async methods from a reviewed contract pin, design the storage/device-authorization/OAuth flows, and test auth selection, token handling and lifecycle cleanup. Keep deterministic generation and the CI byte check. These routes are intentionally outside the 2.0 endpoint coverage table; delegated S3/MCP/Companion/Socket.IO protocols remain separate.

Context: #57

_{🤖 Released by kvz on framework1/python-sdk since 2026-10-10 · resume: codex resume 01a12780-713d-7b83-af02-b7d64ec08d37}