Incorrect path for openapi.yml in HACKING.md

[ilmari]

The API Documentation section in HACKING.md claims the OpenAPI spec is in _data/openapi.yml, but it is in fact in assets/openapi.yml.