"""Handbook domain — read-only platform-fact endpoints for the in-product
系统手册 (System Handbook).

The handbook's live tables (scheduled jobs, connectors, RBAC roles, …) are
rendered from these endpoints instead of hardcoded snapshots, so a handbook
page never goes stale when a cron / driver / role is added or removed.

Everything here is:
  * **read-only** — no mutations, ever;
  * **non-sensitive** — structural facts only (job keys, schedules, driver
    kinds/capabilities, role scopes). No credentials, no run history, no PII;
  * **all-staff** — gated on ``get_current_user`` (any authenticated user),
    matching the handbook's no-role-gate visibility.
"""