Read a current-state audit run by id

Returns one audit run — its status, model, ref, matched/judged counts, and tree-truncation flag — with every per-file verdict, failing files first. Scoped to the requesting org: a run owned by another org is a 404. An authored run requires its declarationId so another configured group cannot read it as the selected result.