DEP Broker

Endpoints:
  POST /dep/token/getcert   -> returns a PEM certificate to upload in ABM when creating the MDM Server
  POST /dep/token/decrypt   -> accepts ABM .p7m Server Token (binary body) and stores decrypted JSON in /app/dep_broker_data

Environment:
  DEP_BROKER_LISTEN   default :9010
  DEP_BROKER_STORAGE  default ./dep_broker_data

Workflow:
  1. Call POST /dep/token/getcert and upload the returned cert to ABM when adding an MDM Server.
  2. Download the Server Token (.p7m) from ABM and POST its raw bytes to /dep/token/decrypt.
  3. The decrypted token JSON will be saved under DEP_BROKER_STORAGE; use it with a DEP tool
     (e.g., MicroMDM or future automation) to create/assign ADE profiles that point to NanoMDM.