feat(api): publish validated OpenAPI contract

apps/web/src/app/api/admin/whoami/route.test.ts

@@ -21,7 +21,13 @@ beforeEach(() => {
 });
 afterEach(() => { auth.session.mockReset(); vi.unstubAllEnvs(); vi.unstubAllGlobals(); });
 
-import { GET as get } from "./route";
+import { assertResponse } from "@/test/openapi-contract";
+import { GET } from "./route";
+async function get(request: Request) {
+  const response = await GET(request);
+  await assertResponse("/api/admin/whoami", "get", response);
+  return response;
+}
 function request(authorization?: string) {
   return new Request("https://portal.example/api/admin/whoami", { headers: authorization === undefined ? {} : { authorization } });
 }