Names

Resolves kind:uuid references to a display_name and, where the kind has one, a reference (SUB-000123, AGR-000045, a quote number). Takes up to 200 references in one request so a page can name a whole column in one round trip instead of one GET per row. Callers are narrowed to the kinds they hold a read permission for, and every query runs under row security: a reference that cannot be named is ABSENT from the response rather than reported as an error, which is the same answer a deleted row gives. Never returns a uuid as a name - a caller with neither a display_name nor a reference should render its own fallback.