Cross-site token verification service
POST /api/public/generate-token?itemId=X
POST /api/public/auto-verify?token=X
GET /api/public/token-status?token=X