Return the expense items and outstanding count for trip_id. Scoped to the authenticated traveler — a trip belonging to a different traveler returns 404 (collapsed with the not-found case to avoid an IDOR oracle on financial data, matching the trip detail and update endpoints in this module). A trip with no expenses returns outstandingCount: 0 and an empty items array. deadline is always null until the corporate expense deadline policy field is modelled.