GET /thr/thredd/card-cvv/{publicToken}/cvv/status
GET /thr/thredd/card-pin/{publicToken}/pin/status
Supports CVV and PIN unblock operations when enabled and applicable.
These flows check status and attempt counters. They do not retrieve actual secure values.