feat(api): admin object read surface (paginated list + get, ViewInternal)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

crates/db/src/catalog.rs

@@ -96,6 +96,39 @@ where
     rows.into_iter().map(map_object).collect()
 }
 
+/// List objects (all visibility levels) ordered by object number, with paging.
+pub async fn list_objects_paged<'e, E>(
+    executor: E,
+    limit: i64,
+    offset: i64,
+) -> Result<Vec<CatalogueObject>, sqlx::Error>
+where
+    E: sqlx::PgExecutor<'e>,
+{
+    let sql =
+        format!("SELECT {OBJECT_COLUMNS} FROM object ORDER BY object_number LIMIT $1 OFFSET $2");
+
+    let rows = sqlx::query(&sql)
+        .bind(limit)
+        .bind(offset)
+        .fetch_all(executor)
+        .await?;
+
+    rows.into_iter().map(map_object).collect()
+}
+
+/// Count all objects (for pagination totals).
+pub async fn count_objects<'e, E>(executor: E) -> Result<i64, sqlx::Error>
+where
+    E: sqlx::PgExecutor<'e>,
+{
+    let row = sqlx::query("SELECT count(*) AS n FROM object")
+        .fetch_one(executor)
+        .await?;
+
+    row.try_get("n")
+}
+
 /// Fetch one **public** object by id. Returns `None` if the object is missing **or**
 /// not public — callers map both to 404 so non-public existence isn't revealed.
 pub async fn public_object_by_id<'e, E>(