Read submitted applicant data for a KYC check

Requires an API client bearer token.

The case's submitted applicant data, narrowed to the custody `review` purpose — the human-adjudication slice, including contact fields the evaluation engines never see. Every read is reported to pii-vault's audit pipeline (`access_recorded: true`) on a best-effort basis — an audit-publish failure never fails the read itself, so this is not an unconditional guarantee — attributed to the identity-kyc service principal, not to the individual console user who made the request.