Ask Flex Auth list, not read, for each overview row (INFD-WP-0004-T03)

The overview now requests the new list action and its rows carry only the
memo id, version, question, live approval status and the person's own
responses without notes. Opening a memo still asks read; every act asks
its own action. The fixture Flex Auth package admits list under a
re-derived pin. Not deployable until flex-auth answers INFD-IN-0008.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 359683@bnt-lap001
Assistant-Session: eebdc939-7a9b-4e50-9d39-c8437e8a14ec

tests/fixtures/review-policy/pin.json

@@ -1,6 +1,6 @@
 {
   "package": "informed-decision.fixture",
   "version": "v1",
-  "package_digest": "sha256:bf39cd7fb33c3db6ba5adb3c036911216e35ef03c1168034e38fe741df67653a",
+  "package_digest": "sha256:f45e366d3a07430a5171716dc9b970dd97b2b1cfa68cfda5a042416f7a277236",
   "fixture_only": true
 }

tests/fixtures/review-policy/policy.md

@@ -6,7 +6,7 @@ version: v1
 status: ready
 package: flexauth.informed_decision.fixture
 allow_ttl: 60s
-actions: [read, acknowledge, accept, return, discuss, decline]
+actions: [read, list, acknowledge, accept, return, discuss, decline]
 owner: fixture-only
 fixtures: [fixtures.json]
 caring:
@@ -32,7 +32,7 @@ decision := {"effect": "allow", "reason": "synthetic_review_fixture"} if {
   input.resource.system == "informed-decision"
   input.resource.type == "decision-memo"
   input.resource.id == "memo:memo-1"
-  input.action in {"read", "acknowledge", "accept", "return", "discuss", "decline"}
+  input.action in {"read", "list", "acknowledge", "accept", "return", "discuss", "decline"}
   input.context.approval_id == "fixture"
 } else := {"effect": "deny", "reason": "fixture_scope_refused"} if {
   true