Follow these steps to test the CIBA flow:

1. Create a dummy user
2. Generate a registration QR code
3. Scan the QR with your mobile authenticator app
4. Trigger a CIBA push notification
5. Monitor the approval in real-time

• POST /api/register/init - Generate registration QR
• POST /api/register/confirm - Device registration
• POST /api/ciba/request - Initiate CIBA request
• GET /api/ciba/status/:id - Poll request status
• POST /api/ciba/callback - Device decision callback