Run Desk Card Play

Run one play against this card's entity. REACHES THE OUTSIDE WORLD.

A play is a workflow, and a workflow can email, send a LinkedIn message or push to a third party. That is why this is not a plain write: the grant to fire one is the grant to have graph8 act on a customer's behalf.

IDEMPOTENT per (org, card, play) for one hour, so a retried press does not fire twice. The play is re-validated against this card's own eligible list, so an action_id the listing hides cannot be run by posting it directly, and the workflow's steps are re-read fresh on every press rather than from the listing's cache.

409 is a refusal, not a failure: the workflow exists and the caller may see it, the desk just will not fire it - and nothing has spent at that point.