GET /api/tally/user/:zid

Anonymous-safe aggregate. Same as account but exposes only the public-safe subset.

Response — 200

{
  "ok": true,
  "zid": "ZEQ07491829374",
  "machines": 2,
  "tokens_minted": 2390,
  "tokens_burned": 6,
  "first_seen_zeqond": "2287400000"
}

Balance is not returned by this endpoint — that's owner-only via /api/tally/account/:zid (which requires the caller to be authenticated as the owner for the full breakdown, but the partial response is anonymous-safe).