Leader Report — Win the Day performance across the team

The in-page Win the Day leaderboard as an admin report: points, activity
and loan production per team member, ranked by points.

Admin/owner only, and session-authenticated only. Unlike the
production report there is no self-scoped version to fall back to — a
table of one is not a ranking — so a loan officer is refused rather than
narrowed, and a bearer token (which has no user) is refused too. Both
answer 404, matching the industry gate: a surface you may not have is
not described to you.

Only users with Win the Day enabled appear, and they are ABSENT rather
than listed with zeroes — a row of zeroes says "did nothing", which is a
different claim from "is not in this programme".

Points are the leaderboard's own, summed over the weeks the period
touches, never rescored here. The team's show_rankings privacy switch
is honoured exactly as the in-page card honours it: with it off, the
response carries rankingsVisible: false and no rows.

Every summary tile totals the column beneath it, so the tiles and the
table can never describe different sets.