Add OpenAPI/Swagger specification for the REST API

[timkrebs]

Create docs/openapi.yaml with all endpoints, request/response schemas, error responses. Optional: serve Swagger UI at /docs in dev mode. Validate with swagger-cli.