Fetch a single artifact record by id. Use it to inspect metadata, access policy, integrity hash (sha256), expiry, and lifecycle status before downloading. The record is returned only to the owner or a listed recipient; others receive 403. This endpoint requires a signed request.