Read one sweep's safe batch projection, item counts, and ledger totals.

This quota-neutral bernayser:read operation omits user_id and every raw JSONB field. Reserve and actual money are converted through Decimal and become floats only at the JSON boundary. Unknown or foreign ids are not_found. Recover from scope_missing with an explicit catalog key; wait for retry_after_sec before retrying rate_limited or service_unavailable. Requires the explicitly minted bernayser:read scope; bernayser:read permits safe projections and bernayser:write permits mutations. This BERNAYSER operation is quota-neutral. While dark it returns not_found, and a valid key without the required scope receives scope_missing. Fix a non-retryable request or credential before retrying; for rate_limited or service_unavailable, wait for retry_after_sec and retry once.