Returns a report of keys approaching expiration or in warning period:

• urgencyCriticalBelowDays, urgencyWarningBelowDays and urgencyCautionBelowDays, the
  strict day boundaries that band daysUntilExpiration into critical / warning / caution —
  served, so the reader is told which rule produced the urgency it is looking at and a
  change to that rule needs no console release
• Keys that have reached soft expiration (warning period started)
• Keys that will expire within the specified threshold

Use this for proactive key renewal planning and compliance.

Authorization:
• Tenant admins: view own tenant's analytics only
• Platform admins: view any tenant's analytics

Path Parameter Validation:
The tenantId in the URL must match the JWT tenantId claim
(unless authenticated as platform admin with PLATFORM.ROOT scope).