Query external tables

Executes one read-only SELECT against the authenticated tenant's materialized external tables. Call /query/schema first to discover logical table and column names. Authorization is tenant-wide in Phase 1; principal-level row authorization is not applied.