chore(openapi): sync server GraphQL metadata

[tiankaima]

Summary

• sync the CLI OpenAPI snapshot with the current server main contract
• regenerate the API path registry for the GraphQL protected-resource metadata endpoint

Root cause

The previous main run observed a cross-repository merge-order race: CLI #10 merged 44 seconds before the matching server contract. The server contract is now stable on main, so this PR contains only the resulting generated drift.

Verification

• make check-openapi-sync against server main 9093c67e
• make sync-openapi generate is idempotent
• make test
• make build
• git diff --check