Looks up a player by email and creates a session. If no player exists with that email, one is auto-created with sensible defaults — making demos frictionless with any email address.
Magic email patterns (for testing edge cases):
[email protected] → 404 Player Not Found[email protected] → 403 Account SuspendedAPI Bearer token. For this demo, any non-empty string is accepted.