The slice of /me/branding a stylesheet needs: accent, canvas, secondary, font family and the font faces — without the logos in the RESPONSE.

The console builds its tenant theme from this on every portal navigation, so the body is deliberately light: no logo data URIs, no font bytes. The row read still loads the logo columns, and the validator is the whole-brand version, so a logo or name change also moves this ETag — one extra read, never a wrong answer. Same tenant resolution as /me/branding, and the same posture: any authenticated member of the tenant may read it.