Add USB storage device control feature

- Add USB policy fields to machines schema (policy, status, error)
- Create usbPolicyEvents table for audit logging
- Implement Convex mutations/queries for USB policy management
- Add REST API endpoints for desktop agent communication
- Create Rust usb_control module for Windows registry manipulation
- Integrate USB policy check in agent heartbeat loop
- Add USB policy control component in admin device overview
- Add localhost:3001 to auth trustedOrigins for dev

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

src/components/admin/devices/admin-devices-overview.tsx

@@ -73,6 +73,7 @@ import type { Id } from "@/convex/_generated/dataModel"
 import { TicketStatusBadge } from "@/components/tickets/status-badge"
 import type { TicketPriority, TicketStatus } from "@/lib/schemas/ticket"
 import { DeviceCustomFieldManager } from "@/components/admin/devices/device-custom-field-manager"
+import { UsbPolicyControl } from "@/components/admin/devices/usb-policy-control"
 import { DatePicker } from "@/components/ui/date-picker"
 import { SearchableCombobox, type SearchableComboboxOption } from "@/components/ui/searchable-combobox"
 
@@ -4961,6 +4962,16 @@ export function DeviceDetails({ device }: DeviceDetailsProps) {
                           ) : null}
                         </CardContent>
                       </Card>
+
+                      {canManageRemoteAccess && device?.osName?.toLowerCase().includes("windows") ? (
+                        <UsbPolicyControl
+                          machineId={device.id}
+                          machineName={device.displayName ?? device.hostname}
+                          actorEmail={primaryLinkedUser?.email}
+                          actorName={primaryLinkedUser?.name}
+                          disabled={isDeactivated}
+                        />
+                      ) : null}
                     </div>
 
                     {windowsCpuDetails.length > 0 ? (