Projects: list projects for the logged-in user (scoped)

Problem: GET /api/sites currently returns all sites globally (SiteSelector shows everyone's).

Scope: scope the list to the caller's memberships.

Done when: the SiteSelector only shows the user's own projects.