feat(management): secured-write list paging with TotalCount (arch-review P3)

Claude-Session: https://claude.ai/code/session_01MtdgwpEeCUn6cUA5f1LMPj

docs/requirements/Component-CLI.md

@@ -354,6 +354,23 @@ The `--tracked-operation-id` value corresponds to the `MessageId` field of the p
 `SiteCall` row (visible on the Central UI Site Calls page and in the `SiteCalls` audit
 table).
 
+### Secured-Write Commands (two-person MxGateway writes)
+
+Query two-person (MxGateway) secured writes — the pending queue plus terminal history.
+Read-only; gated any-of **Operator** / **Verifier** / **Administrator** (the history
+exposes process-sensitive tag values, so it is not open to every authenticated user).
+
+```
+scadabridge secured-write list [--status <status>] [--site <identifier>] [--skip <n>] [--take <n>]
+```
+
+`--status` / `--site` filter the results (omit to match all). `--skip` / `--take` provide
+offset paging (arch-review P3); omitting them uses the historical unpaged default
+(`--skip 0 --take 200`). `--take` is clamped to `1..500` server-side. The result carries a
+`totalCount` (rows matching the filters, ignoring paging) alongside the returned page.
+Overdue `Pending` rows are swept to `Expired` opportunistically each time the list is
+queried (server-side TTL, arch-review S2).
+
 The `--format json|table` option is recursive and accepted on every command above.
 
 ## Configuration