- Added deep‑merge of OpenAPI responses and support for OpenAPI servers
- Updated docs to note that only main app events run (no sub‑apps)
- Fixed bugs in body validation response, OAuth2 security scope testing with overrides, and JSON Schema model handling