Jun 26 MT-1 phase fixes

app/__init__.py

@@ -149,6 +149,8 @@ def create_app(config_name='default'):
     from app.routes import customers       # Phase 5 — Customer management
     from app.routes import scheduled_reports  # Phase 6 — Scheduled reports
     from app.routes import support         # Support chat + admin tickets
+    from app.routes import broadcast       # Admin broadcast messages
+    from app.routes import devices         # Admin device management
 
     app.register_blueprint(auth.bp)
     app.register_blueprint(dashboard.bp)
@@ -163,6 +165,8 @@ def create_app(config_name='default'):
     app.register_blueprint(customers.bp)
     app.register_blueprint(scheduled_reports.bp)
     app.register_blueprint(support.bp)
+    app.register_blueprint(broadcast.bp)
+    app.register_blueprint(devices.bp)
 
     # ── Mobile API (Phase 7 / Phase A / Phase B / Phase C) ───────────────────
     # The /api/v1 blueprint group uses JWT Bearer tokens — no CSRF cookies needed.
@@ -180,6 +184,7 @@ def create_app(config_name='default'):
     from app.api.notifications import bp as _api_notifications_bp
     from app.api.stats         import bp as _api_stats_bp
     from app.api.comments      import bp as _api_comments_bp
+    from app.api.devices       import bp as _api_devices_bp
     csrf.exempt(_api_auth_bp)
     csrf.exempt(_api_facilities_bp)
     csrf.exempt(_api_templates_bp)
@@ -189,6 +194,7 @@ def create_app(config_name='default'):
     csrf.exempt(_api_notifications_bp)
     csrf.exempt(_api_stats_bp)
     csrf.exempt(_api_comments_bp)
+    csrf.exempt(_api_devices_bp)
     register_api(app)
 
     # ── Security response headers ─────────────────────────────────────────