Impersonate Customer (GraphQL)
1-hour expiry, one-time plaintext
The plaintext token is shown once. Token name admin-impersonate:{adminId} for audit; abilities include impersonated-by-admin:{adminId}. Expires in 1 hour.
Permission: customers.customers.edit.

