Create and manage hosted/embedded checkout sessions. Creating a session requires API Key auth with checkout:write scope. The return URL domain must be in the partner's allowed domains list.