Device API key (shown once) — paste into the sync-agent's config.toml on this employee's machine:
config.toml
Employee login (shown once) — share this so they can view their own activity at /employee:
/employee