GET /api/activity/reports/risk/members/

Return the organization's scored members ranked by advisory risk score, highest first, with their groups and the tier-distribution counts (including members with no scored security events in the window, as not_scored; service accounts are excluded from the population). The list is capped, with truncated set when it is partial; the distribution always covers the whole scoped population. The score is a recency-weighted sum of the member's security events over a fixed rolling 30 days, so there is no start/end. Optional groups narrows the population (and the distribution with it); optional tier filters only the list. Restricted to organization admins/managers or activity & security report viewers, and gated by both the activity-tracking and risk-scoring flags.