List never fakes a Rewind moment

GET /api/v1/rewind only lists real recap rows after a signed-in session. A 401 does not mint publicId.

Kumir never invents a successful rewind stamp. GET /api/rewind and GET /api/v1/rewind only return real recap rows after a signed-in session.

A 401 does not mint publicId, deliveredAt, or a reminder. Topics stay on /rewind/topics — the recap list remains signed-in.