api-audit

Audit API routes against shared types — scan routes, plugins, and types for mismatches. Read-only, no changes.