mint a read-only share token for a job

Returns a stateless {job_id}.{hmac} token that grants an authenticated workspace member read access to this job (and its flow subtree) via a view_token query param or X-View-Token header. Only callable by a user who can already read the job.