ARToken C2 API server handling device code phishing initiation, PRT lifecycle management, and token operations via 80+ API endpoints