Authenticated self-service endpoint that takes the bsn from the DigiD token, forwards "documenten aanleveren" to the domain, and relays 404 for an unknown or not-owned registration. Regenerates the committed openapi.json. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>