Get an attendee by its plaintext ticket token, or null. Ticket tokens are unique, so this matches at most one attendee. Backs the admin API create's idempotent retry: the attendee under the retried token is returned as it reads now.