Fix LibreLinkUp API for October 2025 authentication changes

[rollinsio]

Summary

Fixes LibreLinkUp connection failures caused by Abbott's API changes in October 2025.

Problem

Starting in October 2025, Abbott updated the LibreLinkUp API with new authentication requirements:

• New mandatory Account-Id header (SHA-256 hash of user.id)
• Updated version requirement to 4.16.0+
• Product identifier changed from llu.ios to llu.android

Without these changes, all LibreLinkUp connections fail with 403 Forbidden errors during the authorization step.

Changes

Updated API version and product identifier

• Defaults.Version: 4.7.0 → 4.16.0
• Defaults.Product: llu.ios → llu.android

Added Account-Id header support

• Added crypto require for SHA-256 hashing
• Modified sessionFromAuth() to:
  • Extract user.id from auth response
  • Generate SHA-256 hash of user.id as Account-Id
  • Include Account-Id header in /llu/connections request
  • Store userId in session for later use
• Modified dataFromSesssion() to:
  • Generate Account-Id from stored session.userId
  • Include Account-Id header in graph data requests

Testing

Tested with:

• US region LibreLinkUp account
• Follower account configuration
• Verified successful authentication and authorization (HTTP 200)
• Confirmed glucose data retrieval from LibreView API

References

• Similar fixes required across the ecosystem (xDrip, GlucoDataHandler, etc.)
• API change confirmed by community reports in October 2025

This fix enables LibreLinkUp integration to work with the current Abbott API requirements.