curl --request POST \
  --url https://app.tagadapay.com/api/public/v1/builder/sessions/validate \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."
}
'

{
  "valid": true,
  "payload": {
    "type": "builder-session",
    "accountId": "acc_abc123",
    "pluginId": "plg_abc123",
    "permissions": [
      "read:source",
      "write:deploy",
      "read:manifest"
    ],
    "iat": 1705312200,
    "exp": 1705319400
  }
}