Add OpenAPI definition detection (#138)

[jthack]

Summary

• parse JSON and YAML responses for OpenAPI/Swagger metadata
• raise a medium finding when definitions are discovered, including detected version
• register the passive check and enable it in the Balanced preset

Testing

• pnpm lint
• pnpm typecheck
• pnpm test -- --match 'OpenAPI definition'

Closes #138