Mint a 10-minute preview token for the signed-in member

Any current member of the workspace may preview their own public profile, including an unpublished draft. The token is accepted only by the public preview routes. It never records a page open. Returns 503 when the signing key can't be read (migration 20261009h not applied).