Bulk BORME export (offline artifact required)

Fail-closed endpoint with no query contract. It always returns 503 until a governed pre-sanitized static artifact contract exists; the API never scans or redacts the full BORME CSV in PHP-FPM.