Tenant-scoped offer list for the console (newest first, capped). NEVER exposes the pre-authorized code or the transaction code — those are the offer's secrets.