Ability to impersonate a Customer Login using the OpenAPI

🔍 Problem Statement

There is no way for admins to impersonate a customer login via the Core API. When troubleshooting customer-specific issues, support teams must ask the customer for screenshots or attempt to recreate their account state, which slows issue resolution and creates a poor support experience.

💡 User Story

As a Pelcro admin, I want to impersonate a customer's login session via the Core API, so that I can see exactly what the customer sees and troubleshoot issues quickly without requiring their credentials or step-by-step screenshots.

🎯 Definition of Done (DoD)

A feature is done when:

✔️ Given an admin with impersonation permissions, when they call the impersonation API endpoint with a customer ID, then a session token is returned that provides the same view and access as the target customer — and all impersonated actions are logged for audit purposes.