Check discount code validity

Public storefront endpoint. Validate discount eligibility against the checkout context before order creation. If X-Scalev-Guest-Token resolves a non-empty guest cart, the cart is used as the item source. Otherwise the request may provide direct items[] with variant IDs. Unknown or ineligible codes return a validation result with is_eligible: false; the route itself only returns 404 when the store cannot be resolved.