Retrieve a single immutable platform Event by ID while it remains within the 30-day log. Authorization is evaluated from the stored routingSubject and requires platform.event:read: current Account scope authority, explicit Organization authority, or exact Person self-access. Missing, expired, and unauthorized IDs all return the same 404.