OpenAPI spec audit

POST /v1/openapi/lint with an OpenAPI 3 document inline or by URL. Returns machine-readable findings (severity, rule, path, message) for duplicate operationIds, missing error responses, broken $refs, non-HTTPS servers, missing summaries and schema gaps, plus a fix list.