-- After the per-user encryption refactor, devices rows no longer carry
-- cryptographic identity. Existing rows stay untouched; new telemetry rows
-- can omit the column.

alter table public.devices alter column public_key drop not null;