Cohort previews should scan IDs only and freeze reproducibility metadata
Observation (2026-09-06 UTC, source: ender-inference COR-4065 / PR #140 implementation and targeted tests): for privacy-preserving evaluator cohorts, select only call ID plus cursor metadata from Supabase; apply allowlisted filters; keyset-page by `(ended_at, id)`; and emit a can…