Look at a pass without spending it.

The read-only twin of the validate endpoint, for showing a holder the state of their own ticket. Looking at a pass must never spend it, so nothing is redeemed and nothing is recorded.

A pass belonging to another account is reported as not found rather than forbidden: confirming that somebody else's ticket exists is itself a leak.

Requires the pass_validation plan feature. Without it this endpoint answers 403 even with valid credentials.