Fetch all outcome measurements recorded for an intent.

Cookie-session only — uses createServerClient + auth.getUser(); does NOT inspect the Authorization header and rejects pm_live_ API keys. No workspace_id param and no explicit workspace-membership/scope check on this route (relies on Supabase RLS for the session user). Default sort: outcome_index ascending, then measured_at descending. baselineValue/unit may be null; met may be null.