List block volumes in the active scope

Returns the paginated collection of block volumes in the active tenant → subscription → project scope, exactly as the Volumes page renders it: per-row identity (id, name, type), lifecycle status, size and provisioned IOPS, the attachment target (instance id/name and device path, or null when detached), encryption flag, availability zone and creation time. This single endpoint also serves the search/filter/sort/paginate behavior of the view (storage.volume.search_filter_sort): free-text q matches name, volume id or the attached instance name; the counter chips map to attachment=attached|detached and status=ERROR; sortable columns are name, size (sizeGb) and created (createdAt). No state is mutated. Validation: scopeId must reference a scope the caller can read (unknown → 404 via scope resolution, surfaced as 403/404); page/pageSize must be positive integers and sort one of name|size|created (invalid → 422 VALIDATION_FAILED); caller must hold reader-or-higher RBAC on the scope, otherwise 403 FORBIDDEN. Async & state: Synchronous read; no state change. Row-level changes (attach/detach, resize, status transitions CREATING→AVAILABLE/ERROR) arrive as resource.updated SSE frames (kind storage.volume, patch {status, sizeGb, attachedTo, updatedAt}). Errors: 401 missing/expired session; 403 caller lacks read access to the scope; 422 invalid pagination/sort/filter parameters; 500 unexpected backend failure. Idempotency/Concurrency: Safe, cacheable; no idempotency key required.