Remove dead get_docs_attached_to endpoint

Removes an unreachable endpoint that loaded File objects without permission checks, closing a thin existence-only permission gap.