Read a shared booking

Runs booking.getByShareToken. Public read: no session, because the recipient of a share link does not have one. The response is sanitized server-side — payment fields, supplier ids and contact details never reach the wire, and guest names or special requests appear only where the owner opted in. A revoked or unknown token answers the same opaque 404 either way, so this cannot be used to probe which tokens exist.