Accept optional ResourceExtension accounts (global + both devices). Atomic create → allocate → activate when provided.