feat: add 67 new endpoints across 10 feature groups

Prerequisite refactor:
- Consolidate duplicate _to_dicts into shared obb_utils.to_list
- Add fetch_historical and first_or_empty helpers to obb_utils

Phase 1 - Local computation (no provider risk):
- Group I: 12 technical indicators (ATR, ADX, Stoch, OBV, Ichimoku,
  Donchian, Aroon, CCI, Keltner, Fibonacci, A/D, Volatility Cones)
- Group J: Sortino, Omega ratios + rolling stats (variance, stdev,
  mean, skew, kurtosis, quantile via generic endpoint)
- Group H: ECB currency reference rates

Phase 2 - FRED/Federal Reserve providers:
- Group C: 10 fixed income endpoints (treasury rates, yield curve,
  auctions, TIPS, EFFR, SOFR, HQM, commercial paper, spot rates,
  spreads)
- Group D: 11 economy endpoints (CPI, GDP, unemployment, PCE, money
  measures, CLI, HPI, FRED search, balance of payments, Fed holdings,
  FOMC documents)
- Group E: 5 survey endpoints (Michigan, SLOOS, NFP, Empire State,
  BLS search)

Phase 3 - SEC/stockgrid/FINRA providers:
- Group B: 4 equity fundamental endpoints (management, dividends,
  SEC filings, company search)
- Group A: 4 shorts/dark pool endpoints (short volume, FTD, short
  interest, OTC dark pool)
- Group F: 3 index/ETF enhanced (S&P 500 multiples, index
  constituents, ETF N-PORT)

Phase 4 - Regulators:
- Group G: 5 regulatory endpoints (COT report, COT search, SEC
  litigation, institution search, CIK mapping)

Security hardening:
- Service-layer allowlists for all getattr dynamic dispatch
- Regex validation on date, country, security_type, form_type params
- Exception handling in fetch_historical
- Callable guard on rolling stat dispatch

Total: 32 existing + 67 new = 99 endpoints, all free providers.

routes.py

@@ -173,3 +173,44 @@ async def discover_growth():
     """Get growth tech stocks."""
     data = await openbb_service.get_growth()
     return ApiResponse(data=discover_items_from_list(data))
+
+
+# --- Equity Fundamentals Extended (Group B) ---
+
+
+@router.get("/stock/{symbol}/management", response_model=ApiResponse)
+@safe
+async def stock_management(symbol: str = Path(..., min_length=1, max_length=20)):
+    """Get executive team: name, title, compensation."""
+    symbol = validate_symbol(symbol)
+    data = await openbb_service.get_management(symbol)
+    return ApiResponse(data=data)
+
+
+@router.get("/stock/{symbol}/dividends", response_model=ApiResponse)
+@safe
+async def stock_dividends(symbol: str = Path(..., min_length=1, max_length=20)):
+    """Get historical dividend records."""
+    symbol = validate_symbol(symbol)
+    data = await openbb_service.get_dividends(symbol)
+    return ApiResponse(data=data)
+
+
+@router.get("/stock/{symbol}/filings", response_model=ApiResponse)
+@safe
+async def stock_filings(
+    symbol: str = Path(..., min_length=1, max_length=20),
+    form_type: str = Query(default=None, max_length=20, pattern=r"^[A-Za-z0-9/-]+$"),
+):
+    """Get SEC filings (10-K, 10-Q, 8-K, etc.)."""
+    symbol = validate_symbol(symbol)
+    data = await openbb_service.get_filings(symbol, form_type=form_type)
+    return ApiResponse(data=data)
+
+
+@router.get("/search", response_model=ApiResponse)
+@safe
+async def company_search(query: str = Query(..., min_length=1, max_length=100)):
+    """Search for companies by name (SEC/NASDAQ)."""
+    data = await openbb_service.search_company(query)
+    return ApiResponse(data=data)