Discover configured financial-service adapters

Returns the tenant-visible adapter registry. Adapter routes are tenant-authenticated, no-store, and fund-moving build endpoints return unsigned intents gated by policy/spend checks before anything signable is exposed.