ID verification (QR) endpoint. Next step: accept a token, look up `generated_cards.qr_token`, and show student details.

Base URL: