List site scans

Lists one site's malware (antivirus) scans, newest first, as a JSON:API collection of type `site-scans` with the usual `links` / `meta` pagination — the run `status`, the security `verdict` and the file/database threat counters. Each entry carries `status`, `verdict`, `method`, `files_clean`, `files_malicious`, `files_suspicious`, `files_infected`, `db_threats_detected`, `has_threats`, `created_at` and `updated_at`. Path variable `site` is the exact site id (e.g. `12345`). Read only: launching a scan, annotating one and the per-finding rows stay off this surface. Sites of other organizations — and members without the scans read permission — answer 404; an invalid filter value answers 422 and an undeclared sort key 400. A read-only token is enough. The MCP twin of this endpoint is the `sites-scans-index` tool.