New [api] section in stack.toml (host, port, secret, workers) with
env var override via STACK_API_SECRET. conf.secret() resolves
env var > config file for sensitive values.
FastAPI endpoints:
POST /auth/token — issue JWT from configured secret
GET /health — service status
GET /pipelines — list pipelines with step counts
GET /pipelines/{name} — pipeline detail
POST /pipelines/run/{pipeline} — trigger run (auth required)
GET /pipelines/run/{job_id}/status — poll job status
GET /bib/items — query bibliography
GET /bib/tags — tag namespace counts
GET /schema/{table} — JSON Schema from SQLTable models
CLI: stack api serve [--host] [--port] [--workers] [--reload]
12 new API tests, 6 new conf tests.
b45c1a9b74
