GET /v1/documents/{id}/location.
A document id is globally unique, but opening it still needs the profile and workspace which own it. Legacy Koru pills predate routed references and carry only this id; this response lets a client upgrade that old reference at the boundary where the authoritative catalog lives.
