Lists the Project Findings collection: the workspace Findings scoped to the Project's repository, and — for a package Project — narrowed to its package subpath. A finding is in scope when one of its evidence coordinates addresses the Project repository (matched on the canonical repository URL); a root Project (no subpath) includes every finding in that repository, a package Project only those whose coordinate path equals the subpath or begins with the subpath plus a slash. Findings with no evidence inside the scope are excluded. No Project-to-Finding relation is stored: scope is matched at read time. The Project scope is applied before pagination, counts, filters, and sorting. Finding identity, ignore state, evidence, and fix-action behavior are unchanged from the org findings endpoint; detail of gated archetypes (drift/overlap) is withheld on plans without advanced Findings access.