Expand description
HTTP handlers for the Mandate feature (Story 3.4 — FR7 INV-14).
Routes:
POST /mandates— syndic / superadmin issues a mandate.GET /mandates?subject={u}— list active mandates for a user.GET /mandates/{id}— details of a mandate.POST /mandates/{id}/revoke— early revocation.
Auth: syndic / superadmin for write paths; the subject can also read
their own mandates (?subject=<self>).