add json endpoints to the playercard controller

Further to https://github.com/guardian/frontend/pull/7348
This adds json endpoints to supplant the existing corsified non json endpoints at a future date
Why are you returning a `Cors` response for a non-json request?