CardPlease API

Token resolve and sync APIs. Public HTML /t/[token] ships in PRD build order #6.