Versioned snapshot read and mutationKind add/remove POST backed by PlayerInventoryOperations; AAA API tests; Bruno happy path + deny case.