Returns the agreements (terms of service, consent prompts) the
authenticated user still needs to accept on the partner
platform. Titles are localised against the request's
Accept-Language (best-match negotiation; falls back to the
platform default).

Clients on campaigns whose agreements live on a partner platform
send the partner's X-User-Token header — Carrefour's CRM scopes
the response to the token holder. Token TTL is partner defined
(typically ≤5 minutes); expired tokens return 401 with a slug the
frontend can use to refresh. Clients that omit the header get an
empty list; no partner is queried.