Tells whether the caller can clone stores and in which modes.

This route does not answer 403 when an access check fails. It answers 200 with canClone: false and no modes. That happens when the caller is not an admin, is an API user, has no groupId, is not the MAIN contract of a group, or when the store-clone or multi-retailer-login flag is off for the retailer. So this route is safe to call to decide whether to show the clone feature.

SHELL_ONLY is always listed when canClone is true. WITH_CONFIGURATION is listed only while the store-clone-with-configuration flag is active for the retailer of the caller.