PUT body for the retention policy. retention_days floor is enforced both here (422 at the edge) and in the service (defense in depth).
Successful Response
Org audit-retention policy + legal-hold state.