Publish complete OpenAPI auth in the feed

[RhysSullivan]

Adds complete auth to OpenAPI entries in /api.json, so clients can offer one-click add.

auth on kind: "openapi" entries gains query, scheme, oauth { authorizationUrl, tokenUrl } and source (curated | spec | registry). The change is additive.

• scripts/extract-openapi-auth.ts stores each spec's servers, securitySchemes and security requirements in output/openapi-auth.json. This is a tracked cache keyed by spec URL, with ETag and sha256 reuse. The nightly sync refreshes it with --stale 30; builds only read it.
• src/lib/openapi-auth.ts resolves auth in this order: curated, then the spec's own schemes, then registry-auth.json (per-domain registry auth data). Ambiguous auth is omitted. That covers several usable schemes, a key that needs a second key, request signing (AWS), cookies, per-tenant or placeholder hosts, and a relative server on a spec mirror. none is set only when global security is [].

OpenAPI entries with complete auth (3514 entries, 2290 with a spec):

	before	after
curated	15	62
spec	0	643
registry	0	10
total	15	715

Tests are in the PR stacked on top.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	integrationsdotsh	53d824b	Oct 08 2026, 12:20 AM