Issue a short-lived token for live delivery diagnostics

Returns a plain-text bearer token, valid for 60 seconds, that authorises connecting to /api/live/delivery/{target} as a query parameter (?token=...). Useful for EventSource clients that cannot send Authorization headers. Requires LiveDeliveryTest permission.