Returns the applicable verified set, ordered by domain. An EMPTY list is a meaningful
state, not an error: it means no federated login can be admitted, and it is exactly
what blocks enabling an identity provider (409
federation-domain-verification-required).

Unlike the two mutating verbs, this read is available on every deployment type — an
operator diagnosing a refused login must be able to see the set that refused it.