Generate a short-lived JWT token for external builder authentication.
Use Case: When CRM redirects a user to an external page builder, it generates a session token that the builder uses for API calls. This avoids exposing API keys to client-side code.
Token Scoping: Optionally scope the token to specific resources (plugin, deployment, store). If scoped, the token can only access those specific resources.
Expiration: Default is 2 hours. Configurable via expiresIn parameter.
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Successful response