sources is a sample of feedback sources for this key.
Each entry is either a plain string identifier (for example "api", "app",
"model") or a JSON object describing a synthetic source (for example
{"type": "__ls_composite_feedback"} for a computed aggregate). Clients must
tolerate both shapes.
