List callback credentials

Lists the caller tenant's callback credentials (live and revoked), newest first. Returns metadata only — never the token or its hash.