Builds the deployment script that installs the MineOS AI-agent discovery scanner on your organization's devices
through your MDM (Intune, Jamf, Kandji, or any MDM that can run a script). The script is returned in the response
body: save contents to a file named filename and upload it to your MDM.

The package is tied to your organization by a packaging token. For every MDM except Jamf the token is embedded in
the script; for Jamf the script reads it from the policy's $4 parameter and the token is returned separately
in token.token. Generating again returns the same token, so a package can be regenerated at any time.
The token can be revoked with DELETE /api/aispm/v1/mdm-package/token.

Supported targets:

• generic (default when mdm is omitted): macos, windows, linux — os is required
• intune: macos, windows — defaults to windows
• jamf: macos
• kandji: macos

Requires an Admin user of the organization. The environment and region are taken from the API host you call;
they are not request parameters.

Responses:

• 200 — the package (see the response schema)
• 400 — unknown mdm, unknown or unsupported os, or a missing os for generic; error names
  the accepted values
• 403 — reason: "tenant_not_onboarded": your organization is not yet enabled for AI-agent discovery; contact MineOS
  support
• 503 — status: "packaging_unavailable": packaging is temporarily unavailable in this environment; retry later
• 500 — the package could not be generated; retry, and contact support if it persists