Load partner + governance
Response includes governance.commercial (read-only policy summary) and
governance.federation (operator posture). Mutations require
platform_admin or tenant_admin; optional
mutation_reason on PUT is audited (ADR-037).
— federation summary and IdP boundary