bb88358122
Harvest the safe GUI-facing snapshot list slice from PR #2808 without exposing restore, retry, patch-undo, or other runtime mutation endpoints. The endpoint is protected by the existing runtime API token middleware and mirrors the /restore list bound. Refs #2808, #2580. Co-authored-by: gaord <9567937+gaord@users.noreply.github.com>