Store Push To Start Token

Store a Live Activity pushToStart token for the authenticated user. Accepts expired JWTs (signature is still verified). Validates token format only — no APNs call is made.