The distinct tags of the devices the token may read (its company, plus
descendants when its user type allows it) and the device filters select,
exactly as stored, with how many of those devices carry each tag.

The device tag filters on GET /devices (tags_incany, tags_incall)
match the stored spelling exactly and case-sensitively. Use this endpoint
to find that spelling: tag_ilike=field pilot returns Field Pilot and
any other stored spelling. Spellings that differ only by case are separate
rows, each with its own device_count. A device that lists a tag twice
counts once.

Rows are ordered by tag, case-insensitively (ties by byte order, so
Field Pilot precedes field pilot). Without page_meta=true the
response is a bare array of rows.

Device filters are the ones GET /devices accepts, as
<field>_<operator>=<value> (for example company_id_in,
device_type_id_eq, heartbeat_status_in); the most used are listed
below.