List pending and flagged listings for explicit review

Returns a bounded, stable newest-first page of the admin review queue. total covers the full pending/flagged queue, while page.has_more and nullable page.next_offset drive traversal beyond the default 50 rows. Each listing has a derived review_queue_reason and complete decision_evidence compare-and-set snapshot. Admin clients must echo all three evidence fields unchanged when approving or rejecting one listing. That presentation is computed from retained evidence and does not rewrite review_notes. Recognized current and legacy resolver-runtime retry evidence is presented canonically as a non-authoritative sandbox_probe_runtime interruption whose origin remains undetermined, which does not establish seller-endpoint fault; bounded recovery queues a replacement DNS-pinned proof. The raw stored notes remain available for inspection.