Get the company policy link

Called by the MineOS device agent when remediation is enabled for the device, to download and open your organization's
AI policy; you do not call this endpoint yourself. The agent authenticates with its device certificate and receives a
short-lived link to the encrypted policy, the key to decrypt it and the public key to verify its signature.

Responses:

• 200 — { "url", "expiresAt", "tenantId", "tenantKeyVersion", "tenantKey", "signingKeyVersion",
  "signingPublicKey" }: download the policy from url before expiresAt
• 403 — { "reason": "enrollment_not_active" | "not_enabled" }: the device is not an approved device, or
  remediation is not enabled for it
• 503 — { "status": "degraded" }: the link cannot be issued right now; the agent retries