feat(api): admin vocabulary + term management

GET/POST /api/admin/vocabularies and GET/POST /api/admin/vocabularies/{id}/terms;
reads gated on ViewInternal, writes on EditCatalogue; labels round-trip verified.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

crates/api/src/openapi.rs

@@ -1,7 +1,7 @@
 use axum::{Json, Router, extract::State, routing::get};
 use utoipa::OpenApi;
 
-use crate::{AppState, admin, admin_objects, health, public};
+use crate::{AppState, admin, admin_objects, admin_vocab, health, public};
 
 #[derive(OpenApi)]
 #[openapi(
@@ -21,7 +21,11 @@ use crate::{AppState, admin, admin_objects, health, public};
         admin_objects::update_object,
         admin_objects::delete_object,
         admin_objects::list_field_definitions,
-        admin_objects::set_fields
+        admin_objects::set_fields,
+        admin_vocab::list_vocabularies,
+        admin_vocab::create_vocabulary,
+        admin_vocab::list_terms,
+        admin_vocab::add_term
     ),
     components(schemas(
         health::Live,
@@ -37,7 +41,13 @@ use crate::{AppState, admin, admin_objects, health, public};
         admin_objects::ObjectCreateRequest,
         admin_objects::ObjectUpdateRequest,
         admin_objects::CreatedObject,
-        admin_objects::FieldDefinitionView
+        admin_objects::FieldDefinitionView,
+        admin_vocab::VocabularyView,
+        admin_vocab::NewVocabularyRequest,
+        admin_vocab::NewTermRequest,
+        admin_vocab::LabelInput,
+        admin_vocab::TermView,
+        admin_vocab::CreatedId
     )),
     info(title = "Collection Management System", version = "0.0.0")
 )]