Financial Module Platform Backoffice

GET /api/admin/platform/summary exposes platform-admin inventory for the
financial analytics module.

The endpoint is gated by IAM platform_admin role propagation through the
gateway/JWT auth context. It reports:

• Documents and transactions: document ingestion, blobs, jobs, transactions,
  duplicate groups, and linked accounts.
• Categorization: categories, rules, merchant aliases, feedback, stats, and v2
  batch jobs.
• Analytics and cashflow: summaries, trends, forecasts, suggestions, anomalies,
  cashflow predictions, alerts, recurring predictions, and recommendations.
• Planning and goals: budgets, planned expenses, reminders, calendar events,
  scenarios, financial goals, and goal activity.
• Privacy and operations: consent records, audit logs, retention policies,
  notifications, and exchange rates.

Tenant registration approvals, package subscriptions, seats, and entitlements
remain owned by infranotes-iam.

Count Accuracy

The current financial module schema is primarily user-scoped and does not force
row-level security. Exact counts are available only for the hardcoded summary
table allowlist. If a table later enables forced row-level security, the summary
keeps isolation intact by returning PostgreSQL table statistics with
status=degraded and count_accuracy=estimated.

Rollback: revert the endpoint commit. No migrations or datastore changes are
required.