An API governance checklist that fits in one pipeline

Twelve checks that make API governance real: catalog, contracts, breaking change gates, auth, observability, and agent access, all enforced in CI.