Feat ICD: full OpenAPI 3.0.3 kernel spec (160 operations)

Expands the stub openapi.yaml into a complete Interface Control Document
covering every kernel HTTP endpoint. 22 tag groups, 15 reusable component
schemas, inline request/response definitions for all routes. Served at
/api/docs (Swagger UI) and /api/docs/openapi.yaml.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

CHANGELOG.md

@@ -12,6 +12,11 @@ All notable changes to Switchboard Core are documented here.
   Settings > Default Surface dropdown.
 - `default_surface` global config key (JSON `{"id": "slug"}`)
 - Admin settings UI: Default Surface dropdown (extension surfaces only)
+- **ICD (API contract)**: Full OpenAPI 3.0.3 spec covering all 160 kernel
+  endpoints. 22 tag groups (System, Auth, Profile, Workflows, Packages,
+  Connections, Teams, Groups, Extensions, and Admin subsections). Reusable
+  component schemas for User, Team, Group, Workflow, Package, Extension, etc.
+  Served at `/api/docs` (Swagger UI) and `/api/docs/openapi.yaml`.
 
 ### Changed
 

ROADMAP.md

@@ -27,7 +27,7 @@ platform that extensions build on.
 | 5. Fix compilation | ✅ | `go build ./...` clean, 300+ stale route lines cut |
 | 6. Fix tests | ✅ | 8 test packages pass, ~12K stale test lines pruned |
 | 7. Frontend gut | ✅ | Shell + SDK only, 50+ files of chat/notes/projects code removed |
-| 8. New ICD | 🔧 | Stub in place, full kernel-only spec TBD |
+| 8. New ICD | ✅ | Full OpenAPI 3.0.3 spec — 160 operations across 22 tag groups |
 | 9. CI/CD + Dockerfile | ✅ | Single unified image, FE/BE split removed, DB names updated, k8s var alignment fixes (resource quantities, image name, rollout deployment name) |
 | 10. Smoke test | ✅ | K8s deploy live at switchboard.gobha.ai/test, nginx BASE_PATH fixed, login→admin flow verified, branding updated |
 
@@ -49,7 +49,7 @@ SDK stabilization, and the first rebuilt extension (tasks).
 | Step | Status | Description |
 |------|--------|-------------|
 | Default surface routing | ✅ | `/` redirects to configurable default surface. No surfaces → admin. First install becomes default. Changeable in admin settings. |
-| ICD (API contract) | 🔲 | OpenAPI spec from registered routes, kernel-only endpoint docs |
+| ICD (API contract) | ✅ | Full OpenAPI 3.0.3 spec — 160 operations, 22 tag groups, reusable component schemas. Served at `/api/docs`. |
 
 ### v0.2.2 — Event Bus + Triggers