Inspects the target site to detect logged-in state or discover required fields. Returns 200 with success: true when fields are found, or 4xx/5xx for failures. Requires the JWT returned by the exchange endpoint.