Generate Guest Token

Mint a Superset guest token for one dashboard the tenant owns.

The ownership check below is the embed trust boundary: the UUID comes from the browser and must never be trusted as-is. A token is minted only when the dashboard row exists in the caller's tenant schema with provider='superset'.