internal
Exchange a Canada staff session for a US Bearer
Canada-logged-in chef / data_reviewer receives a short-lived US oauth2_token. Auditor must store that token on a separate US HTTP client. A US 401 must not clear Canada auth_info. Canada access_token stays invalid on US.
post/auth/staff-region-token
Request body
Response
US Bearer for this staff user.id