GHSA-q84f-53jg-9ppm: better-auth: Device login approval does not show the requesting client or permissions

The device authorization plugin lets a user sign in on one device by approving a short code on another. In affected versions, the approval information given to the user leaves out which client asked for access and which permissions it wants. The official approval examples therefore show only a generic request and a code, so users cannot tell their own device from an attacker’s request.