Rendered, human-browsable API reference (Redoc) over the live `/openapi.json`. Auth-exempt (documentation, like `/openapi.json`) and read-only — no in-browser request console, so no token-leak surface.