Dataset content scans are bounded and easier to explain

Dataset content requests can now be limited by records read and elapsed time, returning a clear scan-limit response instead of running without bounds or timing out. [[feature:z-gateway-dataset-content|Dataset content read with filters]] also reports access-plan details, fallback reasons, counts, timing, and an explain response so teams can understand how a file was read.