PUBLIC (no auth) — resolve a share token to its run's HONESTY SUMMARY.

Serves ONLY _public_share_summary's whitelist (verdict / engine's read / EV / win rate / fills / skip rate / equity curve + the honesty stamp + the plain-words SHAPE + the share date). NEVER the spec, universe, entry/exit rules, trades, user/account ids, or any PII. An unknown OR revoked token → a uniform 404 (never reveal a token existed). A run whose result was cleared → 404.

Per-IP rate limit FIRST, before any database work (item 20): this is now the read behind an INDEXABLE page, so it is the most-reached unauthenticated route we have, and a token-walking loop must be cheap to refuse. The 429 says nothing about whether the token exists.