update zap local API docs: fix wifi ssids format, add POST /api/crypto, remove OTA endpoints

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: davmoz

docs/developer/zap-local-api.md

@@ -51,15 +51,13 @@ Complete endpoint documentation for the controller firmware.
    - [Modbus Read](#post-apimodbusread)
 5. [Identity & Security](#identity--security)
    - [Crypto Info](#get-apicrypto)
+   - [Initialize (Sign Wallet)](#post-apicrypto)
    - [Sign Message](#post-apicryptosign)
    - [Device Name](#get-apiname)
-6. [OTA Updates](#ota-updates)
-   - [Start Update](#post-apiotaupdate)
-   - [Update Status](#get-apiotastatus)
-7. [Utilities](#utilities)
+6. [Utilities](#utilities)
    - [Debug Info](#get-apidebug)
    - [Echo](#post-apiecho)
-8. [Reference](#reference)
+7. [Reference](#reference)
    - [Status Codes](#status-codes)
    - [Examples](#examples)
    - [Notes](#notes)
@@ -195,10 +193,7 @@ Get WiFi status and scan results.
 **Response** (200):
 ```json
 {
-  "ssids": [
-    { "ssid": "Network1", "rssi": -60, "auth": "WPA2" },
-    { "ssid": "Network2", "rssi": -80, "auth": "OPEN" }
-  ],
+  "ssids": ["Network1", "Network2"],
   "connected": "Network1"
 }
 ```
@@ -1164,77 +1159,59 @@ Get device identity information.
 }
 ```
 
-### POST /api/crypto/sign
+### POST /api/crypto
 
-Sign a message with the device's private key.
+Sign the device ID concatenated with a wallet address. Used to prove device identity during initialization.
 
 **Request**:
 ```json
 {
-  "message": "optional-message-content",
-  "timestamp": "optional-timestamp"
+  "wallet": "0xYourWalletAddress"
 }
 ```
 
 **Response** (200):
 ```json
 {
-  "sign": "3045022100...",
-  "message": "optional-message-content|nonce|timestamp|serial"
+  "idAndWallet": "abc123def456:0xYourWalletAddress",
+  "signature": "3045022100..."
 }
 ```
 
 **Errors**:
-- 400 - Pipe character (`|`) in message or timestamp
-
-### GET /api/name
-
-Get device name (ID).
-
-**Response** (200):
-```json
-{
-  "name": "abc123def456"
-}
-```
-
----
-
-## OTA Updates
+- 400 - Missing `wallet` field
 
-### POST /api/ota/update
+### POST /api/crypto/sign
 
-Start an OTA firmware update. The update runs asynchronously in the background.
+Sign a message with the device's private key.
 
 **Request**:
 ```json
 {
-  "url": "https://example.com/firmware.bin"
+  "message": "optional-message-content",
+  "timestamp": "optional-timestamp"
 }
 ```
 
-**Response** (202):
+**Response** (200):
 ```json
 {
-  "status": "accepted",
-  "message": "OTA update started"
+  "sign": "3045022100...",
+  "message": "optional-message-content|nonce|timestamp|serial"
 }
 ```
 
 **Errors**:
-- 400 - Missing or invalid `url`
-- 409 - Update already in progress
-- 500 - Failed to start OTA
+- 400 - Pipe character (`|`) in message or timestamp
 
-### GET /api/ota/status
+### GET /api/name
 
-Query the current OTA update status and progress.
+Get device name (ID).
 
 **Response** (200):
 ```json
 {
-  "status": "in_progress",
-  "progress": 45
+  "name": "abc123def456"
 }
 ```