fn_resolveDataAccessScope: expose accessibleComisionIds union directly to drop JS dedupe in access-scope.ts:72. DB function + app swap. WI#201 audit.