Create short-lived TURN credentials for a resolved project

Requires turn.credentials.create and access to the active project. Accepts an empty body or at most 4096 bytes of strict JSON with optional ttlSeconds (integer 1–3600, default 600). Returns the same username, credential, urls and ttl contract as the Engine issuer. The returned lifetime is clipped to the authenticated identity and credential expiry.