feat: allow admins to bypass approval flow when joining networks

gatehouse_app/services/device_service.py

@@ -167,10 +167,10 @@ def remove_device(device_id: str, user_id: str) -> None:
         raise DeviceNotFoundError("Device not found.")
 
     # Soft-delete all memberships (deactivates active ones first)
-    for membership in device.memberships:
-        if membership.deleted_at is None:
-            from gatehouse_app.services.network_access_service import revoke_membership_soft
-            revoke_membership_soft(membership.id, revoked_by_user_id=user_id)
+    for request in device.network_access_requests:
+        if request.deleted_at is None:
+            from gatehouse_app.services.network_access_service import revoke_request_soft
+            revoke_request_soft(request.id, revoker_user_id=user_id)
 
     device.delete(soft=True)
 
@@ -180,7 +180,7 @@ def remove_device(device_id: str, user_id: str) -> None:
         organization_id=device.organization_id,
         resource_type="device",
         resource_id=device.id,
-        metadata={"node_id": device.node_id, "memberships_removed": len([m for m in device.memberships if m.deleted_at is None])},
+        metadata={"node_id": device.node_id, "memberships_removed": len([m for m in device.network_access_requests if m.deleted_at is None])},
         description=f"Device {device.node_id} removed",
         success=True,
     )