Export sealed ledger lines

Requires a workspace-bound API key with ledger:read. Returns ledger lines in record order after afterSeq. Each item carries the exact canonical line text, so a client can write NDJSON and run the offline reference checker (`y2-ledger check`) against it. The log is append-only: continuing from meta.nextAfterSeq never skips or repeats a line.