Punch Clock

1) Authenticate PIN

Calls POST /api/auth/pin.

2) Submit punch

Calls POST /api/punch with Bearer token.

Session state

Token present: NO

No API response yet.