GET /public/form-handoffs/{token}

What the QR page on the client's phone renders (ITE-1090): form titles, pet names, fill tokens and submitted flags — nothing about the client (no name at all, the same exposure as an emailed form link) and nothing the page doesn't use. A completed handoff resolves until its deadline, every item submitted and no fill tokens, so a refresh after the last form shows "all done".