Review steps
- Check default plan, billing, amount, currency, and pay currency.
- Confirm human and agent checkout URLs are machine-readable.
- Verify status and claim endpoints include method and request-body hints.
- Ensure the server-card states that the token is shown once and sent as Authorization: Bearer.