chore(release): coordinate integrity and performance source updates

Release v0.1.46. Coordinated integrity review: GovOPlaN/govoplan-core#298.

tools/inventory/endpoint-surface-declarations.json

@@ -2287,6 +2287,27 @@
       "path": "/tasks/{}",
       "rationale": "Task command clients retrieve one explicit task and its strong revision token; the Work UI already receives the same projection through the aggregated list.",
       "repository": "govoplan-tasks"
+    },
+    {
+      "category": "intentionally_headless",
+      "method": "GET",
+      "path": "/connectors/tabular-sources/{}/original-csv",
+      "rationale": "Authorized connector clients explicitly export retained original CSV after tenant, lifecycle, read-scope and source-integrity checks; ordinary catalogue responses never include source text.",
+      "repository": "govoplan-connectors"
+    },
+    {
+      "category": "intentionally_headless",
+      "method": "GET",
+      "path": "/datasources/{}/materializations/{}/original-csv",
+      "rationale": "Administrators explicitly export retained original CSV through an audited API; current and historical field, row and access policies must permit the entire original and source-integrity checks must pass.",
+      "repository": "govoplan-datasources"
+    },
+    {
+      "category": "intentionally_headless",
+      "method": "POST",
+      "path": "/mail/profiles/{}/pop3/imports/{}/bind-maildrop",
+      "rationale": "Authorized mail operators explicitly reconcile a legacy POP3 import to the current maildrop using confirmed binding, a current transport revision token and an exact retained/downloaded-byte match; the audited API never guesses historical account identity.",
+      "repository": "govoplan-mail"
     }
   ],
   "schema_version": 1