Look up one attendee by internal id with the same full booking data the token lookup returns. Backs scope-checked manual check-in picks, which must never carry the ticket credential itself.