feat(cloud): remove static credentials and add host console

apps/device-host-agent/tests/test_client.py

@@ -172,7 +172,7 @@ def test_result_report_retries_identical_payload_after_response_loss() -> None:
     assert payloads[0]["failure_reason"] == "planner unavailable"
 
 
-def test_bootstrap_client_retries_identical_enrollment_and_enrolls_device() -> None:
+def test_bootstrap_client_directly_enrolls_and_enrolls_device() -> None:
     requests: list[httpx.Request] = []
     host_attempts = 0
 
@@ -189,7 +189,6 @@ def test_bootstrap_client_retries_identical_enrollment_and_enrolls_device() -> N
     config = _config(
         host_id="",
         token="",
-        enrollment_token="one-time-token",
         enrollment_managed=True,
     )
     with httpx.Client(
@@ -209,7 +208,6 @@ def test_bootstrap_client_retries_identical_enrollment_and_enrolls_device() -> N
         client.config = _config(
             host_id=host.host_id,
             token="host-token-" + ("x" * 40),
-            enrollment_token="one-time-token",
             enrollment_managed=True,
         )
         device = client.enroll_device(
@@ -223,38 +221,5 @@ def test_bootstrap_client_retries_identical_enrollment_and_enrolls_device() -> N
     assert device.device_id == "device-cloud-a"
     assert len(requests) == 3
     assert requests[0].content == requests[1].content
-    assert requests[0].headers["authorization"] == "Bearer one-time-token"
-    assert requests[2].headers["authorization"] == ("Bearer host-token-" + ("x" * 40))
-
-
-def test_self_service_enrollment_sends_no_authorization_header() -> None:
-    requests: list[httpx.Request] = []
-
-    def handler(request: httpx.Request) -> httpx.Response:
-        requests.append(request)
-        return httpx.Response(201, json={"host_id": "host-cloud-a"})
-
-    config = _config(
-        host_id="",
-        token="",
-        enrollment_token="",
-        enrollment_managed=True,
-    )
-    with httpx.Client(
-        transport=httpx.MockTransport(handler),
-        base_url="https://control.example",
-    ) as http_client:
-        client = HostAgentEnrollmentClient(
-            config,
-            http_client=http_client,
-            sleep=lambda _delay: None,
-        )
-        host = client.enroll_host(
-            agent_instance_id="agent-instance-a",
-            host_token="host-token-" + ("x" * 40),
-            display_name="operator",
-        )
-
-    assert host.host_id == "host-cloud-a"
-    assert len(requests) == 1
     assert "authorization" not in requests[0].headers
+    assert requests[2].headers["authorization"] == ("Bearer host-token-" + ("x" * 40))