Read the submissions back, newest first.

Lives here rather than in the admin router because the write lives here: the table is a team-store table, this module already holds the team-store handle, and splitting reader from writer across two routers is how the two drift about what a source string means.

Every source is returned by default and source narrows it, because the health-system pipeline and the buyer pipeline are read by different people and neither wants to scroll past the other. Honeypot submissions cannot appear: they were never stored (submit_lead returns before the write).

An unknown source is an empty page rather than a 422. The filter names a stream we may add to or rename, and a console that 500s because a chip is a release behind is worse than one that shows nothing.