TL;DR: Trade Republic's "app login" path (ECDSA device pairing) stopped working in late 2025 when TR rolled out AWS-WAF in front of the auth endpoints. That broke this TypeScript connector. We rebuilt ...