Fires the named consumer event using data from the query string and optional JWT claim. Always returns HTTP 200 regardless of outcome — check for an X-Extole-Error-Message response header to detect processing errors. A new access_token cookie may be set on the response when the event establishes or upgrades a consumer identity.