Function handle_sop_logs 

pub async fn handle_sop_logs(
    __arg0: State<AppState>,
    __arg1: ConnectInfo<SocketAddr>,
    headers: HeaderMap,
    __arg3: Query<SopLogsQuery>,
) -> Result<impl IntoResponse, (StatusCode, Json<Value>)>

GET /admin/sop/logs - read one run-filtered page from the same persisted, scrubbed event store used by /api/logs. This route exists so the local CLI can use the established admin transport policy without needing a dashboard bearer token.