Adds the five rider/tracking endpoints, the ?tenantid= staff filter and the 403-vs-404 refusal rules, and replaces the guesswork coverage note with what was actually run against production on 2026-08-06. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>