Returns the tickets issued for a specific fulfillment order belonging to the authenticated end-user, plus a short-lived presigned download URL for the consolidated ticket PDF when one has been produced.

The order is resolved by fulfillment_order_id and must belong to the JWT-authenticated user. If the order does not exist or it belongs to a different user, 404 Not Found is returned without distinguishing between the two — this prevents enumeration of order IDs across users.

If the order exists and belongs to the user but tickets have not yet been assigned (status PENDING / CONFIRMED), 409 Conflict is returned with the current status so the caller can poll.