Typed service contract

Contract notes

• Bearer auth for protected routes.
• Idempotency for create operations.
• ETag / If-Match for optimistic concurrency.
• Problem+JSON responses for failures.

Next implementation step

Copy the starter OpenAPI from the imported pack into the repo, generate types, and wire the first working vertical slice: search → item detail → provenance → trace.