API docs

Human-friendly API docs backed by /api/openapi.json. For the admin APIs, authenticate with an admin token or deploy behind an auth proxy and enable SSO header auth.