CardsAuthorize cardholderAuthorize cardholder POST /api/partner/cards/:id/holder/authorize Authorizes a cardholder action. Requires the holder's pin (raw 4–6 digits). Request Responses200401403Holder authorizedUnauthorized — missing or invalid JWTForbidden — resource not owned by the calling partner