Private form inbox

App-owned response presentation uses the existing permission-aware responses action and declared field labels passed through the host contract. It never imports the page app implementation or exposes editing/restoration of answers.