List the PUBLIC DEMO paper desks with their headline SIMULATED P&L + position/deployment counts.

Auth: UNAUTHENTICATED by design — this powers the logged-out account picker. It returns NO key material (only the sha256 hash is ever stored) and NO position-level detail; the per-account view (GET /v1/accounts/{id}) is key-gated.

P1-F1 SCOPE: only OWNERLESS demo desks (db.list_demo_accounts — user_id IS NULL). It used to list EVERY desk on the platform, which handed an anonymous caller every member's desk name, equity, P&L and bot counts. A member's own desks come from the session-scoped /v1/me/accounts routes, never from here.