List the alterations available for a membership card

Given a valid membership card, lists the renewals the member may buy for it — never an upgrade, a cancel or an extend, for now; cached up to 5 minutes — as products a storefront can render and add to a cart. The response is exactly what GET /api/member/alterations returns to a logged-in member; only the auth and the input differ. Name the membership by its card (cardNumber + membershipCode), or — for a member looked up with GET /api/members — by email + membershipNumber, resolved server-side the same way the member route resolves its own. Business Central decides which options apply and what each costs; each option is returned as the Medusa MEMBERSHIP_RENEW product that sells it, priced at the amount BC quoted rather than at the catalog price. Add one with a MEMBERSHIP_RENEW cart line, passing the same card number, or the same email + membershipNumber with this token. Because the response describes a named person’s membership and prices an offer against it, this endpoint requires a bearer access token in the Authorization header, in addition to the x-entria store header used by every endpoint. Obtain a token from POST /oauth/token; it must have been issued for the same store as this request.