Implement admin enrollment APIs

Data/Engine/domain/device_auth.py

@@ -18,6 +18,7 @@ __all__ = [
     "AccessTokenClaims",
     "DeviceAuthContext",
     "sanitize_service_context",
+    "normalize_guid",
 ]
 
 
@@ -73,6 +74,12 @@ class DeviceGuid:
         return self.value
 
 
+def normalize_guid(value: Optional[str]) -> str:
+    """Expose GUID normalization for administrative helpers."""
+
+    return _normalize_guid(value)
+
+
 @dataclass(frozen=True, slots=True)
 class DeviceFingerprint:
     """Normalized TLS key fingerprint associated with a device."""