feat: add v2 manifest bootstrap endpoints

workplans/IHUB-WP-0019-vsm-hub-bootstrap-api.md

@@ -116,7 +116,7 @@ shell does not have `IHP_LIB`/the IHP dev environment loaded.
 
 ```task
 id: IHUB-WP-0019-T02
-status: todo
+status: done
 priority: high
 state_hub_task_id: "46a027d0-4831-40af-b8ae-e1f858cdaef7"
 ```
@@ -131,6 +131,15 @@ Add documented API or admin-command support for:
 Done when: manifest activation can be executed without clicking through the UI
 and all four type registries are visible through v2 list endpoints.
 
+Implementation note (2026-05-16): added authenticated
+`/api/v2/hub-capability-manifests` support for draft create, draft update, and
+activation, including the same manifest vocabulary conflict checks and
+idempotent registry upserts used by the UI flow. Added
+`/api/v2/policy-scopes`, OpenAPI path/schema entries, SDK helper methods, and
+focused Hspec helper coverage for manifest vocabulary parsing. Local
+`git diff --check` passed; `scripts/compile-check` could not run because this
+shell does not have `IHP_LIB`/the IHP dev environment loaded.
+
 ---
 
 ### T03 — Add first-class VSM hub metadata