Return the built-in codon optimization strategy catalogue.
Static server-side reference data — no DB reads. The endpoint
requires a bearer token so every /v1 operation satisfies
test_every_v1_operation_has_bearer_security.
Cost: read — rate bucket only.