Authenticates a partner client using their credentials and returns an access token. The access token is required for all subsequent API calls and should be included in the Authorization header. The token has a limited validity period and will need to be refreshed when expired.