Draw + claim the oldest reviewable submission for this reviewer.

The store query already excludes the reviewer's own submissions and anything they reviewed before; the claim is compare-and-set so two reviewers drawing concurrently can never hold the same submission. The served payload is the blinded whitelist view — no labeler identity, asserted by test (PRD A §4).