Confirms a pending corporate transfer with the factor the challenge was issued for. Same body as /wallets/transaction/confirm minus userId; the subject is the application that signed the request. Send verificationMethod passkey with origin and passkeyAssertion (the assertion for the options from /wallets/corporate/passkey/approval/start), or sms with verificationCode (the code sent to the root admin's mobile; SMS is used only when the transfer was initiated with verificationMethod sms, an omitted verificationMethod issues a passkey-only challenge). Challenges issued before the application enrolled an API passkey (legacy challenges) still accept the sandbox code 123456. An unknown or expired challengeId is rejected with 999995.