Lists repositories the org connection can see, for the scan-scope repo picker. Given an optional q, runs a provider-side name search when q is present (so a large connection need not be enumerated to find a repo) or lists the first page of the account otherwise. Returns the bare repo name, the owner/repo fullName, and whether the repo is archived. Results are capped; hasMore signals the caller to narrow with q instead of scrolling. Returns 422 (not_scannable_integration) for non-scannable integration types, and 502 when the provider is unreachable or rate-limited — distinct from an empty list, so a load failure never reads as "this connection has no repos".