/api/v1/environments/{id}/snapshots

Records a snapshot operation (202, idempotent); the carrier snapshot itself runs on

the reconcile worker. The body carries no semantic fields — an empty body is

accepted as {}, any non-empty body must still be valid JSON. Operator face:

principal sessions are denied 403 / 404 not_owned.