Authority OpenAPI documents

• v1.json is the generated application surface from the folded Authority host’s /openapi/v1.json: 90 paths and 112 operations at the 2026-09-09 capture. ../api-reference.mdis generated from this document.
• authentication.json preserves the separate six-path authentication contract served by /.well-known/openapi. OpenIddict handles these protocol routes in middleware, so they are absent from the generated application document. Replacing the old application reference must not erase their published contract.

Both captures came from the healthy folded host built at 5b485c6c97308ac4f30f79e5004eceaad272bfdf. The source route registrations were compared with repository 57f7dd35b9; no route path or HTTP method changed in the intervening Authority runtime edits. The deployed query metadata still marks includeGlobal required on the issuer keys and trust reads. AUTH-27 makes those parameters optional with default true in source; that change is not present in the captured runtime and is not represented as deployed here.

Refresh each document from its own endpoint. Regenerate the application reference with tools/scripts/docs/regen-from-openapi.ps1 -AggregatePath <capture> -Service authority.