Add full API catalog doc and enforce API doc updates in AGENTS

AGENTS.md

@@ -205,6 +205,7 @@ Notes / constraints
 - Checkout validation: nightly rate must be within +/-20% of room type default rate (when default rate exists), and minimum stay duration must be at least 1 hour.
 - Room-type reservations: use booking room requests (`booking_room_request`) for quantity holds without room numbers; availability checks include active requests + occupied stays.
 - Cancellation policy engine (advance bookings): policy per property with `freeDaysBeforeCheckin` + `penaltyMode` (`NO_CHARGE`, `ONE_NIGHT`, `FULL_STAY`). On cancel/no-show, penalty charge ledger rows are auto-created (`CANCELLATION_PENALTY` / `NO_SHOW_PENALTY`) when within penalty window.
+- API documentation source of truth: `docs/API_CATALOG.md`. Any API addition, removal, path change, method change, or behavior-impacting request/response change must update this doc in the same commit.
 
 Operational notes
 - Payment provider migrated: PayU removed; Razorpay now used for settings, QR, payment links, and webhooks.
@@ -220,4 +221,5 @@ Access / ops notes (prod)
 - DB (dev): PostgreSQL `trisolaris` on `192.168.1.53:5432` (see `application-dev.properties` in the repo).
 - DB access (server): `sudo -u postgres psql -d trisolaris`.
 - Workflow: Always run build, commit, and push for changes unless explicitly told otherwise.
+- Workflow rule for API changes: after code changes, update `docs/API_CATALOG.md`, then build, commit, and push.
 - Android workflow note: user always runs Shift+F10 in Android Studio to deploy updates.