feat: add xero-practicemanager-v3-1 spec

Author: Quentin Heng

.spectral.yaml

@@ -160,3 +160,10 @@ rules:
   path-params: off  # Disable path parameter validation to address mapping key issues
   owasp:api8:2023-define-cors-origin: off  # Disable CORS origin header requirement
   oas3-operation-security-defined: error # Ensure all scopes are listed in schema
+
+overrides:
+  - files:
+      - "xero-practicemanager-v3-1.yaml#/paths/~1v3.1~1client.api~1paged-list/get/parameters/3"
+      - "xero-practicemanager-v3-1.yaml#/paths/~1v3.1~1client.api~1contacts/get/parameters/3"
+    rules:
+      owasp:api2:2023-no-credentials-in-url: off  # pageToken is a pagination token, not a credential

manifest.json

@@ -39,6 +39,10 @@
       "path": "/xero-payroll-uk.yaml",
       "canPreview": true
     },
+    "practiceManagerV31": {
+      "path": "/xero-practicemanager-v3-1.yaml",
+      "canPreview": true
+    },
     "projects": {
       "path": "/xero-projects.yaml",
       "canPreview": true