Create a handoff access grant

Creates a short-lived interactive access grant. Interactive grants require `ManualHandoff.state = active`. Grant URLs are short-lived bearer capabilities and are not durable authorization truth. Opening the grant URL validates and audits the grant, then redirects to the active runtime provider session. ## Returns Returns a `ManualHandoffAccessGrant`.