Review-queue counts (total + per-trigger + per-pipeline)

Every pending tally in the response is product-scoped: it counts only fields whose resolution can still change the delivered data product, so on an assembly run total is smaller than the full queue that GET /v1/field-reviews lists by default. Pass product_scoped=true on the list route to enumerate exactly the items these counts describe. reviewedByPipeline is not a pending tally and is not scoped.

App keys. NOT reachable by an app service key under any grant, along with GET /v1/field-reviews/triage, /value-clusters, /decisions and /decisions/export: each spans every Spec in the tenant and carries no per-item id a grant could narrow it to.