Validate a PIN entered on the IT Helpline IVR

Returns {"valid": true, "transferNumber": "..."} on success (consumes the PIN), or just {"valid": false} for any failure reason — no distinct error codes, by design (see PRD).