feat(api): publish web-session credential contract

src/app/api/providers/web-session-contract/route.ts

@@ -0,0 +1,10 @@
+import { NextResponse } from "next/server";
+import { requireManagementAuth } from "@/lib/api/requireManagementAuth";
+import { buildWebSessionContract } from "@/lib/providers/webSessionContract";
+
+export async function GET(request: Request) {
+  const authError = await requireManagementAuth(request);
+  if (authError) return authError;
+
+  return NextResponse.json(buildWebSessionContract());
+}