confirm reports an error when it did not drop the pairing, and status and doctor read the held mark from disk while the app is running, so a waiting pairing cannot be described as dropped or as clear.

fix(private-link): speak /app/devices and migrate stored ingest_url