chore: declare new API endpoint surfaces

tools/inventory/endpoint-surface-declarations.json

@@ -357,6 +357,27 @@
       "rationale": "The local bootstrap handoff reads only minimum first-run readiness before a normal authenticated shell exists.",
       "repository": "govoplan-core"
     },
+    {
+      "category": "ui_reachable",
+      "method": "POST",
+      "path": "/admin/privacy/data-subject-requests/{}/erasure-plan",
+      "rationale": "The Data-subject requests administration panel builds this revision-guarded action URL from the selected request identifier.",
+      "repository": "govoplan-core"
+    },
+    {
+      "category": "ui_reachable",
+      "method": "POST",
+      "path": "/admin/privacy/data-subject-requests/{}/execute",
+      "rationale": "The Data-subject requests administration panel builds this explicitly confirmed action URL from the selected request identifier.",
+      "repository": "govoplan-core"
+    },
+    {
+      "category": "ui_reachable",
+      "method": "POST",
+      "path": "/admin/privacy/data-subject-requests/{}/search",
+      "rationale": "The Data-subject requests administration panel builds this provider-search action URL from the selected request identifier.",
+      "repository": "govoplan-core"
+    },
     {
       "category": "public_integration",
       "method": "GET",
@@ -805,6 +826,13 @@
       "rationale": "A short-lived purpose-bound bearer grant lets the public Forms Runtime surface stream one attachment directly to Files without granting general Files access.",
       "repository": "govoplan-files"
     },
+    {
+      "category": "ui_reachable",
+      "method": "GET",
+      "path": "/files/{}/versions/{}/download",
+      "rationale": "Postbox resolves immutable Files evidence references to this exact-version download URL; Files performs the final tenant and access check.",
+      "repository": "govoplan-files"
+    },
     {
       "category": "ui_reachable",
       "method": "POST",