Exchanges a staff member's PIN for a staff token to send as X-Staff-Token on operations performed on their behalf.

From a terminal, send only the pin: PINs are unique per property, so the PIN identifies the person. Send staff_id too when the person is already known.

A wrong or unknown PIN returns 401. After repeated failures the device is locked out for a few minutes (429). Staff tokens expire after a fixed number of hours.