Read the bounded, customer-scoped Knowledge Bases aggregate

Returns one tenant-bound, read-only DTO for the Knowledge Bases page. It includes only lifecycle-safe base/document metadata and hosted-agent attachment ids; it never calls storage or a model, returns document bytes, passages, retrieval queries, provider credentials, or an unbounded document history.