Creates an additional enrollment token for your organization; existing tokens stay valid. An enrollment token is what a
device presents when it first enrolls. In most cases you do not need this call: the MDM package generated by
POST /api/aispm/v1/mdm-package already carries a token. Use it when you want a separate token with its own expiry.

The token value is returned once, in this response, and cannot be retrieved again. Requires an Admin user of the organization.

Responses: 201 — the new token; 400 — { "error" }: validDays out of range;
409 — { "error" }: your organization is not yet enabled for AI-agent discovery; contact MineOS support.