Serve the board projection receipt for run_id.

The response is a deterministic function of the run's journal file: the same journal bytes serve the same board and projection_hash from any server, so a reviewer can cross-check two operators (or the API against a local project_run fold) byte for byte. journal_verified=false marks a chain that no longer recomputes - the board is still rendered but must not be trusted.