[FEATURE] - API contract and schema closure; #58
Description
Workstream A: API contract and schema closure
- Fill api/proto/ with canonical schemas for key, crypto, authz, audit operations
- Generate and validate OpenAPI in api/openapi/ (single source-of-truth flow)
- Freeze v1 request/response schema compatibility matrix