Preview multi-account abuse detector decisions

Admin-only read-only sweep with every candidate decision and full would-alert evidence. Never sends email, records alerts, or pushes metrics. A successful response with complete=false indicates degraded dependency checks and must not be treated as a completed review. No query parameters are accepted. One sweep per API process at a time; bounded to 150 seconds and cancelled when the caller disconnects.