List the accounts storing more than their plan allows, worst first. Admin only.

Computed live across every account rather than read from the cached totals. The cache fills in by use, so an account nobody has touched has no row in it, and a report of who is over quota that quietly omits the dormant accounts is worse than no report — those are exactly the ones that will be surprised when the block turns on.

That makes this the expensive call: it walks the asset and rendition tables. It is admin-only and paged for that reason.

Ordered by the overage in bytes, not by ratio: a free account 1 GB over costs less than a paid one 400 GB over, however alarming the proportion.