feat: complete Epic 1 production foundation

crates/crank-metrics/tests/schema_v1.rs

@@ -46,16 +46,16 @@ fn schema_v1_is_complete_deterministic_and_inside_the_frozen_budget() {
 
 #[test]
 fn frozen_budget_edges_are_exact() {
-    assert!(validate_budget(4_999, 14_999).is_ok());
-    assert!(validate_budget(5_000, 15_000).is_ok());
-    assert!(validate_budget(5_001, 15_000).is_err());
-    assert!(validate_budget(5_000, 15_001).is_err());
-    assert_eq!(crank_metrics::max_exemplar_slots(), 9_170);
+    assert!(validate_budget(5_249, 16_749).is_ok());
+    assert!(validate_budget(5_250, 16_750).is_ok());
+    assert!(validate_budget(5_251, 16_000).is_err());
+    assert!(validate_budget(5_200, 16_751).is_err());
+    assert_eq!(crank_metrics::max_exemplar_slots(), 10_570);
 }
 
 #[test]
 fn every_registered_route_round_trips_without_dynamic_segments() {
-    assert_eq!(HTTP_ROUTE_DOMAIN.len(), 57);
+    assert_eq!(HTTP_ROUTE_DOMAIN.len(), 67);
     for route in HTTP_ROUTE_DOMAIN {
         assert_eq!(HttpRoute::from_matched_path(route).as_str(), *route);
         assert!(!route.contains("trace_id"));
@@ -68,8 +68,8 @@ fn canonical_schema_validation_reports_its_category() {
     assert_eq!(
         schema_budget(),
         Ok(crank_metrics::SchemaBudget {
-            logical_series: 4_513,
-            rendered_series: 14_338
+            logical_series: 5_213,
+            rendered_series: 16_538
         })
     );
 }
@@ -146,7 +146,16 @@ fn process_projection_excludes_mcp_only_metrics_from_admin() {
 fn registered_admin_and_mcp_routes_are_exactly_the_schema_domain() {
     let admin_source = include_str!("../../../apps/admin-api/src/app.rs");
     let mcp_source = include_str!("../../crank-community-mcp/src/app.rs");
-    let auth = ["/login", "/logout", "/session", "/profile", "/password"];
+    let auth = [
+        "/bootstrap/status",
+        "/bootstrap/complete",
+        "/login",
+        "/logout",
+        "/session",
+        "/session/csrf",
+        "/profile",
+        "/password",
+    ];
     let admin_root = ["/capabilities", "/workspaces", "/workspaces/{workspace_id}"];
     let mut actual = BTreeSet::from(["unmatched".to_owned()]);
     for route in route_literals(admin_source) {