Update generated files and dependencies for fru_tracker API

- Regenerated OpenAPI and route files with updated project name and version.
- Updated Go module dependencies to latest versions, including Fabrica and Cobra.
- Refactored client code to support JWT bearer token for authorization.
- Updated copyright year to 2026 across all generated files.
- Removed unimplemented event bus types from event bus middleware.
- Enhanced comments and documentation for clarity and consistency.

Signed-off-by: Alex Lovell-Troy <alex@lovelltroy.org>

Author: alexlovelltroy

Makefile

@@ -3,7 +3,7 @@
 #
 # SPDX-License-Identifier: MIT
 
-.PHONY: help build test test-integration lint clean install run docker-build docker-run release-test check-no-pkg-resources-imports generate generate-check dev
+.PHONY: help build test test-integration lint clean install run docker-build docker-run release-test check-no-pkg-resources-imports generate generate-check dev reuse-annotate-generated
 
 # Variables
 BINARY_NAME=fru-tracker-server
@@ -43,6 +43,22 @@ ifneq ($(strip $(LOCAL_FABRICA)),)
 	fi
 endif
 	$(FABRICA_ENV) $(FABRICA_CMD) generate $(FABRICA_SOURCE_ARG)
+	$(GO) mod tidy
+	@$(MAKE) reuse-annotate-generated
+
+reuse-annotate-generated: ## Add SPDX headers to generated Go files when REUSE is installed
+	@if command -v reuse >/dev/null 2>&1; then \
+		files=$$({ \
+			find internal/storage/ent -type f -name '*.go' -print; \
+			find cmd internal pkg -type f -name '*_generated.go' -print; \
+			printf '%s\n' cmd/server/export.go cmd/server/import.go cmd/client/main.go; \
+		} | while IFS= read -r file; do [ -f "$$file" ] && echo "$$file"; done | sort -u); \
+		if [ -n "$$files" ]; then \
+			reuse annotate --copyright="OpenCHAMI Contributors" --license="MIT" --year="$(shell date +%Y)" --skip-existing $$files; \
+		fi; \
+	else \
+		echo "reuse not installed; skipping generated file annotation"; \
+	fi
 
 generate-check: ## Fail if generated files are out of sync (requires clean git tree)
 	@if ! git diff --quiet || ! git diff --cached --quiet; then \

cmd/client/main.go

@@ -0,0 +1,47 @@
+// Copyright © 2026 OpenCHAMI a Series of LF Projects, LLC
+//
+// SPDX-License-Identifier: MIT
+//
+// This file contains the user-editable OpenAPI extension hook.
+//
+// ✅ This file is safe to edit: it will NOT be overwritten by regeneration.
+//
+// Add any routes that are not Fabrica-generated (legacy APIs, custom endpoints,
+// WireGuard, cloud-init, etc.) to registerCustomOpenAPIPaths so they appear in
+// the served OpenAPI spec and Swagger UI at /openapi.json and /docs.
+//
+// Example:
+//
+//	func registerCustomOpenAPIPaths(spec *openapi3.T) {
+//	    metaDataOp := openapi3.NewOperation()
+//	    metaDataOp.OperationID = "getMetaData"
+//	    metaDataOp.Summary = "Cloud-init meta-data endpoint"
+//	    metaDataOp.Tags = []string{"cloud-init"}
+//	    metaDataOp.Responses = openapi3.NewResponses()
+//	    metaDataOp.Responses.Set("200", &openapi3.ResponseRef{
+//	        Value: openapi3.NewResponse().WithDescription("YAML metadata for the requesting node"),
+//	    })
+//	    spec.Paths.Set("/meta-data", &openapi3.PathItem{Get: metaDataOp})
+//	}
+package main
+
+import "github.com/getkin/kin-openapi/openapi3"
+
+// registerCustomOpenAPIPaths is called by GenerateOpenAPISpec after all
+// Fabrica-generated resource paths have been registered.
+// Add your custom / non-generated route definitions here.
+func registerCustomOpenAPIPaths(spec *openapi3.T) {
+	// Add custom route definitions here.
+	// Example (uncomment and extend as needed):
+	//
+	// op := openapi3.NewOperation()
+	// op.OperationID = "myCustomEndpoint"
+	// op.Summary   = "My custom endpoint"
+	// op.Tags      = []string{"Custom"}
+	// op.Responses = openapi3.NewResponses()
+	// op.Responses.Set("200", &openapi3.ResponseRef{
+	//     Value: openapi3.NewResponse().WithDescription("OK"),
+	// })
+	// spec.Paths.Set("/my-endpoint", &openapi3.PathItem{Get: op})
+	_ = spec
+}