Reads the queue of OKF bundles submitted through `POST /api/okf/ping`.

CARGA_TOKEN only. Up to 50 submissions, oldest first. The edge never fetches a key file or a bundle: submissions require key verification before reading the submitter's host — otherwise a stranger could make us fetch arbitrary URLs. Returns: { pendentes, lote }