Address code review feedback: clarify route comment, document GraphQL convention, remove type assertion

Co-authored-by: hotlong <50353452+hotlong@users.noreply.github.com>

Author: Copilot

packages/objectql/src/protocol-discovery.test.ts

@@ -144,8 +144,9 @@ describe('ObjectStackProtocolImplementation - Dynamic Service Discovery', () =>
     protocol = new ObjectStackProtocolImplementation(engine, () => mockServices);
     const discovery = await protocol.getDiscovery();
 
-    // capabilities field should no longer exist
-    expect((discovery as any).capabilities).toBeUndefined();
+    // capabilities field should no longer exist in the response
+    const keys = Object.keys(discovery);
+    expect(keys).not.toContain('capabilities');
     // Use services to check availability instead
     expect(discovery.services.workflow.enabled).toBe(true);
   });

packages/objectql/src/protocol.ts

@@ -43,7 +43,7 @@ const SERVICE_CONFIG: Record<string, { route: string; plugin: string }> = {
     notification: { route: '/api/v1/notifications', plugin: 'plugin-notifications' },
     ai:           { route: '/api/v1/ai', plugin: 'plugin-ai' },
     i18n:         { route: '/api/v1/i18n', plugin: 'plugin-i18n' },
-    graphql:      { route: '/graphql', plugin: 'plugin-graphql' },
+    graphql:      { route: '/graphql', plugin: 'plugin-graphql' },  // GraphQL uses /graphql by convention (not versioned REST)
     'file-storage': { route: '/api/v1/storage', plugin: 'plugin-storage' },
     search:       { route: '/api/v1/search', plugin: 'plugin-search' },
 };

packages/spec/src/api/discovery.zod.ts

@@ -107,7 +107,7 @@ export const DiscoverySchema = z.object({
   version: z.string(),
   environment: z.enum(['production', 'sandbox', 'development']),
 
-  /** Dynamic Routing — convenience shortcut derived from services */
+  /** Dynamic Routing — convenience shortcut for client routing */
   routes: ApiRoutesSchema,
 
   /** Localization Info (helping frontend init i18n) */