Platform-wide catalog aggregates (public marketing numbers)

The same real numbers rendered on the ShelfAtlas homepage — live offer count, coverage, per-chain breakdown. Unauthenticated: the data is already public, so a key would protect nothing. Bounded instead by a per-IP rate limit and a CDN cache (Cache-Control: public, s-maxage=3600, stale-while-revalidate=86400).