Sync Entity

Trigger a source sync for the entity.

Write-gated: sync triggers a DuckDB scan over S3, which is expensive enough that low-privilege viewers shouldn't be able to fire it in a tight loop. Same write-role guard the other row endpoints use.