feat: CI registers release manifests without a token; the panel verifies the CI signature instead [CI]

backend/src/MoShiro.Backend.Api/ApiModule.cs

@@ -118,6 +118,7 @@ public static class ApiModule
         LinkEndpoints.Map(guarded);
 
         OpsEndpoints.Map(app);
+        BuildEndpoints.MapOffer(app);
         app.MapOpenApi("/openapi/v1.json");
         app.MapStaticSite();
         return app;