Returns every Actor credential in the tenant across all actors, with the owning actor's display name joined into actorName. Optionally narrow by status (ACTIVE / ROTATING_OUT / REVOKED) and/or expiresWithinDays (return only credentials whose validUntil falls within the next N days — credentials with no expiry are excluded from the window). Filters are applied server-side before pagination, so the page totals are filtered counts. A tenant with no matching credentials returns an EMPTY page with HTTP 200 — never 404.