No published query lists a tenant's runs, so a surface cannot offer a run picker

Found while building module-ecommerce-reporting-livewire.

Queries\ListRunResults answers two questions: the newest run that succeeded (runId null), and one run by id. There is nothing in between.

A surface that wants to show "the last seven runs, and which of them refused something" — which the runbook question "is this module one that has never run, or one with nothing to report" invites — has no published route to it. The only way to get a list of runs is ReportRun::query(), and reaching for a domain model is forbidden in an -api package by BoundaryAssertions::apiAdapterAvoidsDomainModels and by every surface package's own boundary suite.

So the Livewire package ships no run history and no run picker. A host that wants one has to pass a runId it obtained from somewhere this module does not publish.

A ListRuns(string $tenantId, int $limit) returning list<RunReport> — the DTO already exists and already carries the window, the counts and the refusals — would close it without adding a table or a decision.

Start with Queries\ListRunResults and the existing RunReport DTO, then inspect the API package's published query registrations and boundary tests, including BoundaryAssertions::apiAdapterAvoidsDomainModels. Add the tenant-scoped ListRuns query with its limit and verify that it returns the existing DTOs without reaching for domain models.