Get the current customer and bookings

Returns the authenticated buyer's own profile plus their booking history, through the explicit anonymous-branch whitelist (never an admin serializer): no `password_hash`, no `site_id`, no token internals, no other customer. Booking visibility follows the retro-link inbox-control gate: a VERIFIED buyer sees their full history, while an UNVERIFIED buyer sees ONLY the bookings they made while authenticated as this account (`booked_authenticated`). Any guest booking merely tied to the same email, whether retro-linked before signup OR made by a third party after an unverified account claimed the email, stays hidden until the buyer proves inbox control, so registering with someone else's email never exposes that person's bookings or stored profile. Unverified responses expose null profile fields; verified responses may expose the stored profile. The booking list is capped at the 100 most recent entries. Behind the publishable key, the `customer_accounts` flag, and the customer-auth middleware. Returns 200 with `{ customer, bookings }`. > **Note:** This endpoint requires the e-commerce feature to be enabled on your site.