📄️Identity behind the token
Returns the person, the organization and the token (type, scopes, access level, expiration) of the Bearer credential. Use it to test whether the configured token is valid: it is the only route exempt from the scope check, so any valid token gets a response. `user` is the person in `sub` when the token carries an email, and null for a machine token. It never returns the token itself.