ci: harden inter-hub production smoke gate

.gitea/workflows/deploy.yaml

@@ -79,3 +79,14 @@ jobs:
             | grep -q "inter-hub" && echo "Landing page OK"
           curl -s https://hub.coulomb.social/api/v2/widgets \
             -o /dev/null -w "%{http_code}" | grep -q "401" && echo "API auth gate OK"
+          HUBS_STATUS=$(curl -s https://hub.coulomb.social/api/v2/hubs \
+            -o /dev/null -w "%{http_code}")
+          test "${HUBS_STATUS}" = "401" \
+            && echo "Hub bootstrap auth gate OK" \
+            || { echo "Expected /api/v2/hubs to return 401, got ${HUBS_STATUS}" >&2; exit 1; }
+          OPENAPI=$(curl -fsS https://hub.coulomb.social/api/v2/openapi.json)
+          for path in /hubs /hub-capability-manifests /api-consumers /policy-scopes; do
+            grep -q "\"${path}\"" <<< "${OPENAPI}" \
+              && echo "OpenAPI path present: ${path}" \
+              || { echo "OpenAPI path missing: ${path}" >&2; exit 1; }
+          done