Return manifest keys managed policy declares whose value was dropped.
Not a launch failure: only ENFORCED_MANAGED_KEYS stops a launch, and every
other rejected managed value deliberately falls through to the user tier.
But the fall-through was announced only through logger.warning, which the
package's in-memory log handler makes unreachable from stderr — the handler
installed at import time means logging.lastResort never fires. An
administrator who typed max_tokens = "8000" saw a clean green table and
had no way to learn the value was ignored.
Managed table to inspect. Must come from a snapshot whose
status is usable.
