Stronger ownership checks for remote control

Symptom: Remote control commands need strict checks so only the right user can control the right spa. Improvement: Stronger ownership checks have been prepared, but this item is not active until the full flow can be deployed safely. What this means: This remains tracked as a safety improvement, not a live customer-facing change yet.