Get the cities for the given country_code and state_code as {label, value} pairs, ordered by name. The endpoint caches the result forever under cities_list_v2_{country_code}_{state_code}.

Auth: Both — no authentication required. Public reference endpoint under the group (called by the SPA before login); no role scoping — same global list for everyone.

Rate limit: 100 requests/min.

Request

• Query: country_code (string, required) — must be a known country code.
• Query: state_code (string, required) — must be a known state code.

Response — { data. } envelope.

• data (array of objects) — cities for that state/country.
• value (integer) — city id.
• label (string) — city name.

Errors: 422 on validation failure.