Read the app's durable runtime-failure events

Owner-only. Returns the app's own api_proxy_result, visitor_calls_refused (calls from people who are not members, refused at their limits and summarized per 10 seconds; not runtime failures), image_proxy_result (external image failures), diag_report (runtime JS errors, CSP violations), contract_validation, app_load_error, and render_token_revoked events from durable storage — use this after publishing to learn what broke at runtime. Unlike GET /app/{id}/diag (in-memory ring buffer, always lost on deploy), these rows are meant to survive deploys, but most kinds here are telemetry the server can shed under sustained load rather than block a request on: api_proxy_result and render_token_revoked at the telemetry lane's in-flight write budget, and diag_report, image_proxy_result, app_load_error in the in-process queue those flood-prone kinds share. Only contract_validation (and the audit kinds this endpoint does not return) write synchronously and are never shed. Requires the app token or the owner's user token; render tokens and claim cookies are rejected. Not to be confused with GET /app/{id}/events, the live-state SSE stream.