Audit vs live swagger: guide covers the CLI-mirrored operational core; added verified aggregation/row-count + a full inventory section pointing to the unauthenticated /docs-json spec for the ~35 uncovered groups (auth/session, user, spaces, share, attachments, import/export, trash, templates, org/oauth/admin/billing, official webhooks, plugin UI…).