Add a schema-drift test asserting openapi.ts matches the actual Express route table

[Jagadeeshftw]

📌 Description

src/openapi.ts is hand-maintained per the README ("hand-maintained OpenAPI-shaped description"), which means it can silently drift from the real routes registered in createApp() (src/app.ts). openapi.test.ts validates the spec's own shape but not that it actually reflects the live route table.

🧩 Requirements and context

• Walk the Express app's registered routes (via its internal router stack, or a small introspection helper) and compare method+path pairs against the paths declared in buildOpenApiSpec().
• Fail the test if a route exists without a spec entry, or a spec entry references a route that no longer exists.
• Keep the check resilient to path-param syntax differences (:id vs {id}).

🛠️ Suggested execution

• Add a route-introspection helper (test-only) that lists {method, path} from createApp().
• Add the comparison test to src/openapi.test.ts.
• Fix any drift the new test uncovers.

✅ Acceptance criteria

• Every registered route has a corresponding OpenAPI path entry.
• Every OpenAPI path entry corresponds to a real route.
• Test fails loudly on future drift.

🔒 Security notes

Indirectly reduces risk of undocumented/forgotten routes escaping review.

📋 Guidelines

• Minimum 95% test coverage
• Clear documentation
• Timeframe: 96 hours

[GBOYEE]

Hi \u2014 I can take this on (Add a schema-drift test asserting openapi.ts matches the actual Exp...). I'll build the UI per the acceptance criteria. I'll open a PR referencing this shortly once assigned.

[Jagadeeshftw]

@GBOYEE thanks for the interest — you're currently at the 6 open-issue assignment cap for this repo, so I can't assign this one right now (backfill automation). Please finish or release one of your existing assigned issues, then request this one again and it'll be picked up.

[grantfox-oss]

🦊 GrantFox — @GBOYEE has been assigned to this issue as part of the Official Campaign | FWC26 campaign!

Next steps:

1. Open a Pull Request referencing this issue (e.g., Closes #83)
2. Your PR will be reviewed by the AnchorNet-Org maintainers

Good luck! Track your progress on GrantFox.