List manageable action configurations

Requires action_configurations:read. Includes collection drafts and archived definitions. Summaries only, without private configuration or credentials. At most ten source definitions per page; follow nextCursor until null, including empty pages. Cursor is signed and bound to tenant and family filter. Disabled families are skipped without a filter and return 404 when explicitly requested. Concurrent changes are not a snapshot.