Redeem Install Token

Exchange a one-time install token for daemon credentials.

Called by the install script. Token is in the body (not the URL) to avoid exposure in access logs, CDN logs, and browser history.