List the assets of the company an answer request is about

The documents, certificates or audits held by the company a questionnaire request is about — the picker behind every asset-link question. The company comes from the request's onBehalfOfCompanyId, never from the caller. Readable by all three parties to the request: the answering company selecting an asset, the brand reviewing the answer, and the subject company itself; anyone else gets 404 request_not_found. This exists because the generic pickers reach these rows through the caller's own network (certificates) or through per-asset sharing rows (audits), so a delegated answering party saw an empty list and could only ever create a new asset, never select one the company already holds — and a linked asset rendered blank when the page was reopened. Archived and soft-deleted assets are excluded.