Scalar API docs deployment

Serve interactive API docs via Scalar, generated from the OpenAPI spec.

Acceptance criteria:
- [ ] Scalar served at /docs
- [ ] Spec stays in sync with code (generated, not hand-written)
- [ ] Auto-deployed on push to main via GitHub Actions